CVE-2017-4057

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
McAfee	Advanced Threat Defense (ATD)	3.10; 3.8; 3.6; 3.9

References

http://www.securityfocus.com/bid/99561
https://kc.mcafee.com/corporate/index?page=content&id=SB10204Patch, Vendor Advisory
http://www.securityfocus.com/bid/99561
https://kc.mcafee.com/corporate/index?page=content&id=SB10204Patch, Vendor Advisory

Timeline

Published: Jul 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-48958.8Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploitation of this issue CVE-2017-48963.8Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Succes CVE-2017-48975.5VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this i CVE-2017-48988.8VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DL CVE-2017-48994.7VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit t CVE-2017-49005.5VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the SVGA driver. Successfu CVE-2017-49019.9The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds m CVE-2017-49028.8VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player 12.x prior to 12.5.5 CVE-2017-49038.8VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.CVE-2017-49048.8The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch E CVE-2017-49055.5VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi600-201703403-SG, 6.CVE-2017-49079.8VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap