CVEvulnerability
CVE-2014-9921
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.7 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:P
- Weaknesses
- CWE-264
Description
Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error.
Affected configurations
• mcafee cloud analysis and deconstructive services (<= 1.0.0.4d)
• mcafee cloud analysis and deconstructive services 1.0.0.3
Related
Weakness · not in database (1)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10087 Vendor Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10087 Vendor Advisory