PT-2019-16631 · Mcafee · Mcafee Endpoint Security

Published 2019-05-15 · Updated 2020-10-16 · CVE-2019-3586

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security (ENS) versions prior to 10.6.1 May 2019 update

Description A protection mechanism failure in the firewall allows context-dependent attackers to circumvent protection by manipulating GTI reputation, preventing the firewall from blocking connections to specially crafted malicious sites.

Recommendations For versions prior to 10.6.1 May 2019 update, update to the May 2019 update or later to resolve the issue. As a temporary workaround, consider restricting access to sites with questionable GTI reputation to minimize the risk of exploitation.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2019-3586

Affected Products

Mcafee Endpoint Security

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-3586 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3586 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10280 · Note
• http://securityfocus.com/bid/108416 · Note