CVE-2020-7269

Published: Apr 15, 2021Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

Affected (1)

Products: Mcafee: Advanced Threat Defense

1 product

Advanced Threat Defense

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Advanced Threat Defense	Before 4.12.2

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10336

Source: trellixpsirt@trellix.com

Broken LinkVendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10336

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkVendor Advisory

Timeline

No history available yet.