VYPR
← All advisories
High severity8.4NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026

CVE-2019-3660

CVE-2019-3660

Description

Improper Neutralization of HTTP requests in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute commands on the server remotely via carefully constructed HTTP requests.

Affected products

3
  • McAfee/Advanced Threat Defense3 versions
    cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*range: <4.8
    • (no CPE)range: <4.8
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.