CVE-2020-7270: Sensitive Information Exposure in McAfee ATD
Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-7270?
CVE-2020-7270 is a vulnerability in the web interface of McAfee Advanced Threat Defense (ATD) prior to 4.12.2 that allows remote authenticated users to view sensitive unencrypted information.
How can remote authenticated users exploit CVE-2020-7270?
Remote authenticated users can exploit CVE-2020-7270 by sending a carefully crafted HTTP request parameter.
What is the risk of CVE-2020-7270?
The risk of CVE-2020-7270 is the exposure of sensitive unencrypted information.
How can I mitigate the risk of CVE-2020-7270?
You can partially mitigate the risk of CVE-2020-7270 by ensuring that your ATD instances are deployed properly.
Where can I find more information about CVE-2020-7270?
You can find more information about CVE-2020-7270 at the following link: [McAfee Knowledge Center](https://kc.mcafee.com/corporate/index?page=content&id=SB10336)