PT-2019-16631 · Mcafee · Mcafee Endpoint Security

Publicado 2019-05-15 · Atualizado 2020-10-16 · CVE-2019-3586

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security (ENS) versions prior to 10.6.1 May 2019 update

Description A protection mechanism failure in the firewall allows context-dependent attackers to circumvent protection by manipulating GTI reputation, preventing the firewall from blocking connections to specially crafted malicious sites.

Recommendations For versions prior to 10.6.1 May 2019 update, update to the May 2019 update or later to resolve the issue. As a temporary workaround, consider restricting access to sites with questionable GTI reputation to minimize the risk of exploitation.

Correção

Protection Mechanism Failure

Enumeração de Fraquezas

CWE-693

Identificadores relacionados

CVE-2019-3586

Produtos afetados

Mcafee Endpoint Security

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-3586 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10280 · Nota
• https://osv.dev/vulnerability/CVE-2019-3586 · Aviso do Fabricante
• http://securityfocus.com/bid/108416 · Nota