CVE-2020-7269

4.3 mediumEPSS 0.7%

Exposure of Sensitive Information in the web interface in McAfee Advanced Threat Defense (ATD) prior to 4.12.2 allows remote authenticated users to view sensitive unencrypted information via a carefully crafted HTTP request parameter. The risk is partially mitigated if your ATD instances are deployed as recommended with no direct access from the Internet to them.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2021-04-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:advanced_threat_defense

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10336
https://kc.mcafee.com/corporate/index?page=content&id=SB10336

Check your stack JSON