VULNERABILITY INTELLIGENCE

CVE-2020-7270

CVSS score4.9 MEDIUM
EPSS probability0.82%
CISA KEVNot currently listed
Published2021-04-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Description

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

Weakness classification

  • trellixpsirt@trellix.com: CWE-200
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references