CVE-2017-4057: Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8,...

Security readout for executives and security teams

CVE-2017-4057 lets an already authenticated user of McAfee Advanced Threat Defense elevate privileges through the web interface. This is most concerning where ATD administration is reachable by many users or exposed beyond a tightly managed admin network. Exposure is limited to organizations running affected McAfee ATD versions with authenticated access to the web interface. Risk rises if GUI access is internet-reachable, broadly reachable internally, or available to low-privilege accounts. Treat this as a high-priority legacy appliance risk if McAfee ATD is still deployed. It requires valid credentials, but compromise of a security analysis platform can weaken detection operations and administrative control. Mitigation focus: Review McAfee advisory SB10204 for vendor-specified fixes or upgrades.; Restrict ATD GUI access to trusted administration networks only.; Remove unused ATD accounts and enforce least-privilege roles..

Prepared

Jun 12, 2026, 22:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.