Vulnerability Details : CVE-2017-4057
Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands.
Vulnerability category: Gain privilege
Products affected by CVE-2017-4057
- cpe:2.3:a:mcafee:advanced_threat_defense:3.10:*:*:*:*:*:*:*
- cpe:2.3:a:mcafee:advanced_threat_defense:3.8:*:*:*:*:*:*:*
- cpe:2.3:a:mcafee:advanced_threat_defense:3.6:*:*:*:*:*:*:*
- cpe:2.3:a:mcafee:advanced_threat_defense:3.4:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2017-4057
0.95%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 74 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2017-4057
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
8.0
|
6.4
|
NIST | |
|
8.8
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
References for CVE-2017-4057
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10204
McAfee Security Bulletin - Advanced Threat Defense update fixes various web vulnerabilities (CVE-2017-4052, CVE-2017-4053, CVE-2017-4054, CVE-2017-4055, and CVE-2017-4057)Patch;Vendor Advisory
-
http://www.securityfocus.com/bid/99561
McAfee Advanced Threat Defense CVE-2017-4057 Privilege Escalation Vulnerability
Jump to