Lucene search
TrellixCVELIST:CVE-2019-3653HistoryOct 09, 2019 - 2:21 p.m.
CVE-2019-3653 ESConfig Tool access not controlled
2019-10-0914:21:45
CWE-284
trellix
www.cve.org
1
4.6 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
0.0004 Low
EPSS
Percentile
5.1%
Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.
CNA Affected
[
{
"product": "McAfee Endpoint Security (ENS)",
"vendor": "McAfee, LLC",
"versions": [
{
"lessThan": "10.6.1",
"status": "affected",
"version": "10.6.x",
"versionType": "custom"
},
{
"lessThan": "10.5.5",
"status": "affected",
"version": "10.5.x",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2019-3653
2019-10-09 16:15:16
cve
cve
CVE-2019-3653
2019-10-09 16:15:16
prion
prion
Improper access control
2019-10-09 16:15:00
symantec
symantec
McAfee Endpoint Security CVE-2019-3653 Unauthorized Access Vulnerability
2019-10-08 00:00:00
4.6 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
0.0004 Low
EPSS
Percentile
5.1%
Related for CVELIST:CVE-2019-3653