CVE-2017-3896

Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
mcafeemcafee_agent
5.0.0
mcafeemcafee_agent
5.0.1
mcafeemcafee_agent
5.0.2
mcafeemcafee_agent
5.0.3
mcafeemcafee_agent
5.0.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/95903
http://www.securitytracker.com/id/1037629
https://kc.mcafee.com/corporate/index?page=content&id=SB10183
http://www.securityfocus.com/bid/95903
http://www.securitytracker.com/id/1037629
https://kc.mcafee.com/corporate/index?page=content&id=SB10183