Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

McAfee Agent remote log view can be tricked by attackers

CVE-2017-3896 · published 9 years ago
Summary

Versions of McAfee Agent before 5.0.4.449 let someone on the network send a crafted web address to the remote log‑viewing function. Because the address isn’t checked properly, the server can be made to run commands or reveal information it shouldn’t. Install the updated 5.0.4.449 version or later, or block access to the remote log view from untrusted systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
mcafee mcafee_agent 5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
cpe:2.3:a:mcafee:mcafee_agent:5.0.0:*:*:*:*:*:*:*
Original advisory text
Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters...
Unvalidated parameter vulnerability in the remote log viewing capability in Intel Security McAfee Agent 5.0.x versions prior to 5.0.4.449 allows remote attackers to pass unexpected input parameters via a URL that was not completely validated.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.9 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published13 Feb 2017
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-3896 · NVD
Track software like this
Free during beta