CVE-2019-3586 Vulnerability Details

  /     /     /  

CVE-2019-3586 Metadata Quick Info

CVE Published: 15/05/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: trellix | Vendor: McAfee, LLC | Product: McAfee Endpoint Security (ENS)
Status : PUBLISHED

---

CVE-2019-3586 Description

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-693
CWE Name: CWE-693 Protection Mechanism Failure
Source: McAfee, LLC

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).