Lucene search

[email protected]CVE-2019-3629

HistoryJun 27, 2019 - 9:15 p.m.

CVE-2019-3629

2019-06-2721:15:10

[email protected]

web.nvd.nist.gov

cve-2019-3629

application protection

bypass vulnerability

mcafee

esm

unauthenticated user

impersonation

system users.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

JSON

Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.

Affected configurations

NVD

Node

mcafeeenterprise_security_managerRange<10.4.0

mcafeeenterprise_security_managerRange11.0.0–11.2.0

CPENameOperatorVersion
mcafee:enterprise_security_managermcafee enterprise security managerlt10.4.0
mcafee:enterprise_security_managermcafee enterprise security managerlt11.2.0

CPE	Name	Operator	Version
mcafee:enterprise_security_manager	mcafee enterprise security manager	lt	10.4.0
mcafee:enterprise_security_manager	mcafee enterprise security manager	lt	11.2.0

CNA Affected

[
  {
    "product": "McAfee Enterprise Security Manager (ESM)",
    "vendor": "McAfee, LLC",
    "versions": [
      {
        "lessThan": "11.2.0",
        "status": "affected",
        "version": "11.x",
        "versionType": "custom"
      },
      {
        "lessThan": "10.4.0",
        "status": "affected",
        "version": "10.x",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10284

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

JSON

Related for CVE-2019-3629

cvelist1 nvd1 prion1