VulnerabilityModified

CVE-2015-3028

McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters.

MEDIUM 5.5EPSS 0.99%

Does this matter?

Lower severity and a low EPSS score (0.99%). Track it; it rarely justifies an emergency change on its own.

Description

McAfee Advanced Threat Defense (MATD) before 3.4.4.63 allows remote authenticated users to bypass intended restrictions and change or update configuration settings via crafted parameters.

CVSS 2.0: 5.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N
EPSS: 0.99% probability · 60th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: mcafee/advanced threat defense
Source: cve@mitre.org

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10112Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10112Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.