{"api_version":"1","generated_at":"2026-07-23T05:39:49+00:00","cve":"CVE-2017-4057","urls":{"html":"https://cve.report/CVE-2017-4057","api":"https://cve.report/api/cve/CVE-2017-4057.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2017-4057","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-4057"},"summary":{"title":"CVE-2017-4057","description":"Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands.","state":"PUBLISHED","assigner":"intel","published_at":"2017-07-12 15:29:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["NVD-CWE-noinfo","Privilege Escalation vulnerability"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"8.8","severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/99561","name":"http://www.securityfocus.com/bid/99561","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Malformed Request","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10204","name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10204","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"McAfee Security Bulletin - Advanced Threat Defense update fixes various web vulnerabilities (CVE-2017-4052, CVE-2017-4053, CVE-2017-4054, CVE-2017-4055, and CVE-2017-4057)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-4057","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-4057","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"McAfee","product":"Advanced Threat Defense (ATD)","version":"affected 3.10","platforms":[]},{"source":"CNA","vendor":"McAfee","product":"Advanced Threat Defense (ATD)","version":"affected 3.8","platforms":[]},{"source":"CNA","vendor":"McAfee","product":"Advanced Threat Defense (ATD)","version":"affected 3.6","platforms":[]},{"source":"CNA","vendor":"McAfee","product":"Advanced Threat Defense (ATD)","version":"affected 3.9","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2017","cve_id":"4057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"advanced_threat_defense","cpe6":"3.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"4057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"advanced_threat_defense","cpe6":"3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"4057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"advanced_threat_defense","cpe6":"3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2017","cve_id":"4057","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"advanced_threat_defense","cpe6":"3.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T14:39:41.156Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10204"},{"name":"99561","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/99561"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Advanced Threat Defense (ATD)","vendor":"McAfee","versions":[{"status":"affected","version":"3.10"},{"status":"affected","version":"3.8"},{"status":"affected","version":"3.6"},{"status":"affected","version":"3.9"}]}],"datePublic":"2017-07-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands."}],"problemTypes":[{"descriptions":[{"description":"Privilege Escalation vulnerability","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-14T09:57:01.000Z","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","shortName":"intel"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10204"},{"name":"99561","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/99561"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@intel.com","DATE_PUBLIC":"2017-07-11T00:00:00","ID":"CVE-2017-4057","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Advanced Threat Defense (ATD)","version":{"version_data":[{"version_value":"3.10"},{"version_value":"3.8"},{"version_value":"3.6"},{"version_value":"3.9"}]}}]},"vendor_name":"McAfee"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Privilege Escalation vulnerability"}]}]},"references":{"reference_data":[{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10204","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10204"},{"name":"99561","refsource":"BID","url":"http://www.securityfocus.com/bid/99561"}]}}}},"cveMetadata":{"assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","assignerShortName":"intel","cveId":"CVE-2017-4057","datePublished":"2017-07-12T15:00:00.000Z","dateReserved":"2016-12-26T00:00:00.000Z","dateUpdated":"2024-09-17T00:11:36.953Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-07-12 15:29:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["NVD-CWE-noinfo","Privilege Escalation vulnerability"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:advanced_threat_defense:3.4:*:*:*:*:*:*:*","matchCriteriaId":"AD7EA0FB-89B8-42D5-9FEB-ED7BCF95C0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:advanced_threat_defense:3.6:*:*:*:*:*:*:*","matchCriteriaId":"BA8CE425-423E-4770-A4E8-5FCFABC23D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:advanced_threat_defense:3.8:*:*:*:*:*:*:*","matchCriteriaId":"C3361CC0-8D59-459F-A349-22028BDEA4FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:advanced_threat_defense:3.10:*:*:*:*:*:*:*","matchCriteriaId":"2FD51315-9731-42B2-A9D2-E6E18A417658"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2017","CveId":"4057","Ordinal":"1","Title":"CVE-2017-4057","CVE":"CVE-2017-4057","Year":"2017"},"notes":[{"CveYear":"2017","CveId":"4057","Ordinal":"1","NoteData":"Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated users to gain elevated privileges via the GUI or GUI terminal commands.","Type":"Description","Title":"CVE-2017-4057"},{"CveYear":"2017","CveId":"4057","Ordinal":"2","NoteData":"2017-07-12","Type":"Other","Title":"Published"},{"CveYear":"2017","CveId":"4057","Ordinal":"3","NoteData":"2017-07-14","Type":"Other","Title":"Modified"}]}}}