PT-2019-1352 · Mcafee · Mcafee Mvision Endpoint

Published 2019-01-22 · Updated 2020-08-24 · CVE-2019-3584

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee MVision Endpoint versions prior to 1811 Update 1 (18.11.31.62)

Description The issue is related to an Authentication vulnerability in McAfee MVision Endpoint, which is associated with inadequate access control. This allows authenticated administrator users to remove MVision Endpoint via unspecified vectors.

Recommendations For versions prior to 1811 Update 1 (18.11.31.62), update to version 1811 Update 1 (18.11.31.62) or later to resolve the issue.

Fix

Improper Access Control

Improper Authentication

Weakness Enumeration

CWE-284

CWE-287

Related Identifiers

BDU:2019-00690

CVE-2019-3584

Affected Products

Mcafee Mvision Endpoint

References · 7

• https://osv.dev/vulnerability/CVE-2019-3584 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00690 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-3584 · Security Note
• http://securityfocus.com/bid/106789 · Note
• https://cxsecurity.com/cveshow/CVE-2019-3584 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10265 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10265 · Note