CVE-2020-7270 | BDVDB-2026-152169 Detail
McAfeeMcAfee Advanced Threat Defense (ATD)
Description#
Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: adjacent.
Weaknesses#
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.