PT-2019-1352 · Mcafee · Mcafee Mvision Endpoint

Publicado 2019-01-22 · Atualizado 2020-08-24 · CVE-2019-3584

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee MVision Endpoint versions prior to 1811 Update 1 (18.11.31.62)

Description The issue is related to an Authentication vulnerability in McAfee MVision Endpoint, which is associated with inadequate access control. This allows authenticated administrator users to remove MVision Endpoint via unspecified vectors.

Recommendations For versions prior to 1811 Update 1 (18.11.31.62), update to version 1811 Update 1 (18.11.31.62) or later to resolve the issue.

Correção

Improper Access Control

Improper Authentication

Enumeração de Fraquezas

CWE-284

CWE-287

Identificadores relacionados

BDU:2019-00690

CVE-2019-3584

Produtos afetados

Mcafee Mvision Endpoint

Referências · 7

• https://osv.dev/vulnerability/CVE-2019-3584 · Aviso do Fabricante
• http://securityfocus.com/bid/106789 · Nota
• https://cxsecurity.com/cveshow/CVE-2019-3584 · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10265 · Nota
• https://bdu.fstec.ru/vul/2019-00690 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-3584 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10265 · Nota