VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026

CVE-2019-3650

CVE-2019-3650

Description

Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database.

Affected products

3
  • McAfee/Advanced Threat Defense3 versions
    cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*range: <4.8
    • (no CPE)range: <4.8
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.