PT-2019-2545 · Mcafee · Mcafee Agent

Publicado 2019-02-26 · Atualizado 2022-04-05 · CVE-2019-3599

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Agent versions 5.x

Description The issue is related to an Information Disclosure vulnerability in the Remote logging component of McAfee Agent. This component is disabled by default. When enabled, it allows remote unauthenticated users to access sensitive information. The vulnerability is associated with a lack of protection for service data, which can be exploited by a remote attacker to disclose protected information.

Recommendations For McAfee Agent version 5.x, consider disabling the Remote logging feature to prevent exploitation until a fix is available. Restrict access to sensitive information and ensure that Remote logging is only enabled when necessary, with appropriate security measures in place. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2019-02393

CVE-2019-3599

Produtos afetados

Mcafee Agent

Referências · 6

• https://bdu.fstec.ru/vul/2019-02393 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-3599 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3599 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10271&actp=null&viewlocale=en_US&showDraft=false&platinum_status=false&locale=en_GB · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10271&actp=null&viewlocale=en_US&showDraft=false&platinum_status=false&locale=en_GB · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10271 · Nota