Mcafee Llc Mcafee Advanced Threat Defense vulnerabilities

CVE-2020-7269 [MEDIUM] CWE-200 CVE-2020-7269: Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Inter

CVE-2020-7270 [MEDIUM] CWE-200 CVE-2020-7270: Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Inter

CVE-2020-7262 [MEDIUM] CWE-200 CVE-2020-7262: Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter.

CVE-2020-7254 [HIGH] CWE-264 CVE-2020-7254: Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense ( Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.