Read the docs
TI-2019-02698 Aliases CVE-2019-3663GHSA-538g-8rx5-rhf7

Advanced Threat Defense (ATD) - Unprotected storage of shared credentials vulnerability

Priority MEDIUM 44CWE-522Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-522.

Summary

Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted in this being updated to Critical. The root password is common across all instances of ATD prior to 4.8. See the Security bulletin for further details

Why it matters now

EPSS 0.00907 60th percentileScored 2026-11-07
Fix Fixed Advanced Threat Defense (ATD) (McAfee): 4.8

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeAdvanced Threat Defense (ATD)before 4.84.8Patch availableCNA
  • Advanced Threat Defense (ATD) VendorMcAfee Affected before 4.8 Fixed in 4.8 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:*before 4.8VulnerableMcAfee
  • cpe:2.3:a:mcafee:advanced_threat_defense:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·McAfee

Remediation

  • Fix · CNA Advanced Threat Defense (ATD) (McAfee) Fixed in 4.8

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3663
  2. 2026-10-03 Alias added: GHSA-538g-8rx5-rhf7

References

Other 1

  • TI-2017-03024 OS command injection in McAfee Advanced Threat Defense CVSS 3.0CRITICAL 9.8
  • TI-2017-03023 Missing authentication in McAfee Advanced Threat Defense CVSS 3.0CRITICAL 9.8
  • TI-2017-03025 Command injection in McAfee Advanced Threat Defense CVSS 3.0HIGH 8.8
  • TI-2017-03027 Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense… CVSS 3.0HIGH 8.8
  • TI-2019-02696 Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVSS 3.1HIGH 8.8
  • TI-2019-02695 Advanced Threat Defense (ATD) - Improper Neutralization of HTTP requests CVSS 3.1HIGH 8.8
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences