Lucene search

TrellixCVE-2019-3640

HistoryNov 14, 2019 - 12:15 a.m.

CVE-2019-3640

2019-11-1400:15:11

CWE-319

trellix

web.nvd.nist.gov

cve-2019-3640

information security

vulnerability

epo

mcafee

data loss prevention

ldap

network security

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.003

Percentile

70.6%

JSON

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity.

Affected configurations

Nvd

Node

mcafeedata_loss_preventionRange11.0.0–11.4.0

VendorProductVersionCPE
mcafeedata_loss_prevention*cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	data_loss_prevention	*	cpe:2.3:a:mcafee:data_loss_prevention::::::::

CNA Affected

[
  {
    "product": "Data Loss Prevention",
    "vendor": "McAfee",
    "versions": [
      {
        "lessThan": "11.4.0",
        "status": "affected",
        "version": "11.x",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10298

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.003

Percentile

70.6%

JSON

Related for CVE-2019-3640