Lucene search

TrellixCVELIST:CVE-2019-3640

HistoryNov 14, 2019 - 12:05 a.m.

CVE-2019-3640 Data Loss Prevention - Unprotected Transport of Credentials

2019-11-1400:05:53

trellix

www.cve.org

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

0.003 Low

EPSS

Percentile

70.7%

JSON

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity.

CNA Affected

[
  {
    "product": "Data Loss Prevention",
    "vendor": "McAfee",
    "versions": [
      {
        "lessThan": "11.4.0",
        "status": "affected",
        "version": "11.x",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10298

4.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for CVELIST:CVE-2019-3640