title: Privilege escalation in Advanced Threat Defense
description: Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command.
problem types: CWE-264 Permissions, Privileges, and Access Controls
affected:
{
product:  McAfee Advanced Threat Defense (ATD)
vendor: McAfee, LLC
versions:
lessThan: 4.8.2, status: affected, version: 4.x, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.7
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H
version: 3.1
]