← CVE Intelligence

CVE-2019-3661

Advanced Threat Defense (ATD) - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads.

Affected (CNA)

Vendor / productVersions
McAfee / Advanced Threat Defense (ATD)affected unspecified before 4.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.