CVE-2019-3663

CVE-2019-3663 is an unprotected storage of credentials vulnerability affecting McAfee Advanced Threat Defense (ATD) versions prior to 4.8. A local attacker can gain root access by accessing sensitive files, as the root password is common across all vulnerable ATD instances. Initially rated High, further investigation elevated its severity to Critical, with a CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness among security researchers.