VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026

CVE-2019-3649

CVE-2019-3649

Description

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files.

Affected products

3
  • McAfee/Advanced Threat Defense3 versions
    cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*range: <4.8
    • (no CPE)range: <4.8
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.