Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-3604 State: PUBLISHED Published: 2019-02-01T16:00:00 Last Updated: 2024-08-04T19:12:09.652Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: McAfee, LLC Products: ePolicy Orchestrator Cloud Problem Types: Cross Site Request Forgery (aka Session Riding) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in McAfee ePO (legacy) Cloud allows unauthenticated users to perform unintended ePO actions using an authenticated user's session via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10268 - http://www.securityfocus.com/bid/10683
er: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10268 - http://www.securityfocus.com/bid/106830
CVE ID: CVE-2019-3606 State: PUBLISHED Published: 2019-03-26T17:23:48 Last Updated: 2024-08-04T19:12:09.668Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee LLC Products: McAfee Network Security Manager (NSM) Problem Types: Data Leakage Attacks vulnerability Description: Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corpora
or GUI terminal commands. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10274 - http://www.securityfocus.com/bid/107613
CVE ID: CVE-2019-3610 State: PUBLISHED Published: 2019-02-13T17:00:00Z Last Updated: 2024-09-16T18:24:29.562Z Severity: MEDIUM (CVSS 5.6 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: McAfee, LLC Products: True Key (TK) Problem Types: Data Leakage Attacks vulnerability Description: Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key (TK) 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107217 - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102889
CVE ID: CVE-2019-3612 State: PUBLISHED Published: 2019-04-10T20:10:39 Last Updated: 2024-08-04T19:12:09.709Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: Data eXchange Layer (DXL) Platform, Threat Intelligence Exchange (TIE) Server Problem Types: Information Disclosure vulnerability Description: Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id
. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10279
CVE ID: CVE-2019-3613 State: PUBLISHED Published: 2020-06-10T11:12:49.485244Z Last Updated: 2024-09-16T19:00:57.397Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N) Vendors: McAfee, LLC Products: McAfee Agent (MA) Problem Types: CWE-427 Description: DLL Search Order Hijacking vulnerability in McAfee Agent (MA) prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10320
CVE ID: CVE-2019-3615 State: PUBLISHED Published: 2019-03-12T22:00:00 Last Updated: 2024-08-04T19:12:09.653Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: McAfee, LCC Products: McAfee Database Security (DAM) Problem Types: Data Leakage Attacks vulnerability Description: Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10277 - http://www.securityfo
E Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10277 - http://www.securityfocus.com/bid/107385
CVE ID: CVE-2019-3617 State: PUBLISHED Published: 2020-06-10T07:29:50 Last Updated: 2024-08-04T19:12:09.711Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: Total Protection (ToPS) for Mac OS Problem Types: Privilege escalation vulnerability Description: Privilege escalation vulnerability in McAfee Total Protection (ToPS) for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/FAQDocument.aspx?&id=TS103052
CVE ID: CVE-2019-3619 State: PUBLISHED Published: 2019-07-03T13:40:04 Last Updated: 2024-08-04T19:12:09.665Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee ePolicy Orchestrator (ePO) Problem Types: Information disclosure vulnerability Description: Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 allows remote unauthenticated attacker to view sensitive information in plain text via sniffing the traffic between the Agent Handler and the SQL server. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/
er and the SQL server. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10286 - http://www.securityfocus.com/bid/109066
CVE ID: CVE-2019-3621 State: PUBLISHED Published: 2019-07-25T16:20:25 Last Updated: 2024-08-04T19:12:09.743Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: Data Loss Prevention (DLPe) for Windows Problem Types: Authentication protection bypass vulnerability Description: Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine. Additional Analyst Notes: - CVE Program
when the screen is locked. The attacker requires physical access to the machine. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10290 - http://www.securityfocus.com/bid/109370
CVE ID: CVE-2019-3622 State: PUBLISHED Published: 2019-07-24T16:13:17 Last Updated: 2024-08-04T19:12:09.661Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: Data Loss Prevention (DLPe) for Windows Problem Types: CWE-552 Description: Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create symbolic links. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index
e symbolic links. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10290 - http://www.securityfocus.com/bid/109370
CVE ID: CVE-2019-3628 State: PUBLISHED Published: 2019-06-27T16:55:16 Last Updated: 2024-08-04T19:12:09.699Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L) Vendors: McAfee, LLC Products: McAfee Enterprise Security Manager (ESM) Problem Types: Privilege escalation Description: Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10284
CVE ID: CVE-2019-3629 State: PUBLISHED Published: 2019-06-27T20:33:59 Last Updated: 2024-08-04T19:12:09.717Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee Enterprise Security Manager (ESM) Problem Types: Application protection bypass vulnerability Description: Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10284
CVE ID: CVE-2019-3630 State: PUBLISHED Published: 2019-06-27T20:39:48 Last Updated: 2024-08-04T19:12:09.593Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee Enterprise Security Manager (ESM) Problem Types: Command Injection vulnerability Description: Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10284
CVE ID: CVE-2019-3631 State: PUBLISHED Published: 2019-06-27T20:42:42 Last Updated: 2024-08-04T19:12:09.675Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee Enterprise Security Manager (ESM) Problem Types: Command Injection vulnerability Description: Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10284
CVE ID: CVE-2019-3632 State: PUBLISHED Published: 2019-06-27T20:44:36 Last Updated: 2024-08-04T19:12:09.602Z Severity: HIGH (CVSS 8.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: McAfee, LLC Products: McAfee Enterprise Security Manager (ESM) Problem Types: Directory Traversal vulnerability Description: Directory Traversal vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to gain elevated privileges via specially crafted input. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10284
CVE ID: CVE-2019-3633 State: PUBLISHED Published: 2019-08-21T15:16:50 Last Updated: 2024-08-04T19:12:09.676Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: McAfee, LLC Products: Data Loss Prevention (DLPe) for Windows Problem Types: Buffer overflow Description: Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via a carefully constructed message sent to DLPe which bypasses DLPe internal checks and results in DLPe reading unallocated memory. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=
ted memory. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10295
CVE ID: CVE-2019-3634 State: PUBLISHED Published: 2019-08-21T15:17:15 Last Updated: 2024-08-04T19:12:09.699Z Severity: MEDIUM (CVSS 4.4 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: McAfee, LLC Products: Data Loss Prevention (DLPe) for Windows Problem Types: Buffer Overflow Description: Buffer overflow in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.2.8 allows local user to cause the Windows operating system to "blue screen" via an encrypted message sent to DLPe which when decrypted results in DLPe reading unallocated memory. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10295
CVE ID: CVE-2019-3635 State: PUBLISHED Published: 2019-08-14T16:18:50 Last Updated: 2024-08-04T19:12:09.670Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: McAfee, LLC Products: McAfee Web Gateway (MWG) Problem Types: Exfiltration of Data Description: Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10293
CVE ID: CVE-2019-3636 State: PUBLISHED Published: 2019-10-28T14:23:25.909754Z Last Updated: 2024-09-17T02:57:42.466Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: McAfee, LCC Products: McAfee Total Protection Problem Types: File Masquerade Vulneraiblity Description: A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcente
out being detected. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102982
CVE ID: CVE-2019-3637 State: PUBLISHED Published: 2019-08-14T16:23:13 Last Updated: 2024-08-04T19:12:09.701Z Severity: MEDIUM (CVSS 4.1 CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: McAfee, LLC Products: McAfee FRP Problem Types: CWE-264 Description: Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10291
CVE ID: CVE-2019-3638 State: PUBLISHED Published: 2019-09-12T15:14:29 Last Updated: 2024-08-04T19:12:09.685Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: McAfee Products: Web Gateway(MWG) Problem Types: Reflected Cross Site Scripting vulnerability Description: Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive information or execute commands with the MWG administrator's credentials via tricking the administrator to click on a carefully constructed malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://kc.
on a carefully constructed malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10294
CVE ID: CVE-2019-3639 State: PUBLISHED Published: 2019-08-14T16:20:39 Last Updated: 2024-08-04T19:12:09.699Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: McAfee, LLC Products: McAfee Web Gateway (MWG) Problem Types: Clickjack vulnerability Description: Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10293
CVE ID: CVE-2019-3640 State: PUBLISHED Published: 2019-11-14T00:05:53 Last Updated: 2024-08-04T19:12:09.699Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: McAfee Products: Data Loss Prevention Problem Types: Unprotected Transport of Credentials Description: Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB
dditional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10298
CVE ID: CVE-2019-3641 State: PUBLISHED Published: 2019-11-13T10:35:52 Last Updated: 2024-08-04T19:12:09.684Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N) Vendors: McAfee,LLC Products: Threat Intelligence Exchange Server (TIE Server) Problem Types: CWE-285 Description: Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10303
CVE ID: CVE-2019-3643 State: PUBLISHED Published: 2019-09-11T14:08:19.340279Z Last Updated: 2024-09-16T17:49:16.217Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: McAfee, LLC Products: McAfee Web Gateway (MWG) Problem Types: Denial of Service Description: McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9511, potentially leading to a denial of service. This affects the scanning proxies. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10296
CVE ID: CVE-2019-3644 State: PUBLISHED Published: 2019-09-11T14:08:37.545857Z Last Updated: 2024-09-17T01:11:51.259Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: McAfee, LLC Products: McAfee Web Gateway (MWG) Problem Types: Denial of Service Description: McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10296
CVE ID: CVE-2019-3646 State: PUBLISHED Published: 2019-09-13T13:05:30.972134Z Last Updated: 2024-09-17T04:14:09.427Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L) Vendors: McAfee, LLC Products: McAfee Total Protection - Free Antivirus Trial Problem Types: CWE-714 Description: DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection (MTP) Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/FAQDocument.aspx?&id=TS1029
. Additional Analyst Notes: - CVE Program Container: References: - http://service.mcafee.com/FAQDocument.aspx?&id=TS102968
CVE ID: CVE-2019-3648 State: PUBLISHED Published: 2019-11-13T08:55:53 Last Updated: 2024-08-04T19:12:09.706Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L) Vendors: McAfee,LLC Products: McAfee Total Protection Problem Types: Privilege Escalation Description: A Privilege Escalation vulnerability in the Microsoft Windows client in McAfee Total Protection 16.0.R22 and earlier allows administrators to execute arbitrary code via carefully placing malicious files in specific locations protected by administrator permission. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984 - h
Program Container: References: - https://service.mcafee.com/webcenter/portal/cp/home/articleview?articleId=TS102984 - https://safebreach.com/Post/McAfee-All-Editions-MTP-AVP-MIS-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-3648
CVE ID: CVE-2019-3649 State: PUBLISHED Published: 2019-11-13T22:30:54 Last Updated: 2024-08-04T19:12:09.656Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: McAfee Products: Advanced Threat Defense (ATD) Problem Types: Information Disclosure vulnerability Description: Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attackers to gain access to hashed credentials via carefully constructed POST request extracting incorrectly recorded data from log files. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE ID: CVE-2019-3650 State: PUBLISHED Published: 2019-11-13T22:46:01 Last Updated: 2024-08-04T19:12:09.655Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: McAfee Products: Advanced Threat Defense (ATD) Problem Types: Information Disclosure vulnerability Description: Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to the atduser credentials via carefully constructed GET request extracting insecurely information stored in the database. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE ID: CVE-2019-3651 State: PUBLISHED Published: 2019-11-13T22:45:53 Last Updated: 2024-08-04T19:12:09.709Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: McAfee Products: Advanced Threat Defense (ATD) Problem Types: Information Disclosure vulnerability Description: Information Disclosure vulnerability in McAfee Advanced Threat Defense (ATD prior to 4.8 allows remote authenticated attackers to gain access to ePO as an administrator via using the atduser credentials, which were too permissive. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10304
CVE ID: CVE-2019-3652 State: PUBLISHED Published: 2019-10-09T14:21:13 Last Updated: 2024-08-04T19:12:09.719Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: McAfee, LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-94 Description: Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10299
CVE ID: CVE-2019-3653 State: PUBLISHED Published: 2019-10-09T14:21:45 Last Updated: 2024-08-04T19:12:09.671Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N) Vendors: McAfee, LLC Products: McAfee Endpoint Security (ENS) Problem Types: CWE-284 Description: Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10299