Lucene search

[email protected]CVE-2019-3582

HistoryFeb 28, 2019 - 4:00 p.m.

CVE-2019-3582

2019-02-2816:00:00

[email protected]

web.nvd.nist.gov

cve-2019-3582

vulnerability

privilege escalation

microsoft windows

mcafee

endpoint security

ens 10.6.1

nvd

6.1 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

COMPLETE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:C/A:P

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances.

Affected configurations

NVD

Node

mcafeeendpoint_securityRange≤10.6.1

CPENameOperatorVersion
mcafee:endpoint_securitymcafee endpoint securityle10.6.1

CPE	Name	Operator	Version
mcafee:endpoint_security	mcafee endpoint security	le	10.6.1

CNA Affected

[
  {
    "product": "McAfee Endpoint Security (ENS)",
    "vendor": "McAfee, LLC",
    "versions": [
      {
        "lessThan": "10.5.3 Hotfix 1240838",
        "status": "affected",
        "version": "10.5.3",
        "versionType": "custom"
      },
      {
        "lessThan": "10.5.4 Hotfix 1240838",
        "status": "affected",
        "version": "10.5.4",
        "versionType": "custom"
      },
      {
        "lessThan": "10.5.5 Nov 2018 update",
        "status": "affected",
        "version": "10.5.5",
        "versionType": "custom"
      },
      {
        "lessThan": "10.6.1 Nov 2018 update",
        "status": "affected",
        "version": "10.6.1",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10254

Social References

6.1 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

COMPLETE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:C/A:P

8.6 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2019-3582

prion1 cvelist1 nvd1