| |
Vulnerability CVE-2019-3663
Published: 2019-11-14
| Description: |
Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. |
Type:
CWE-522 (Insufficiently Protected Credentials)
CVSS2 => (AV:L/AC:L/Au:N/C:P/I:N/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
2.1/10 |
2.9/10 |
3.9/10 |
| Exploit range |
Attack complexity |
Authentication |
Local |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
None |
None |
References: |
https://kc.mcafee.com/corporate/index?page=content&id=SB10304
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
