PT-2019-16646 · Mcafee · Mcafee Web Advisor
Published
2019-12-03
·
Updated
2019-12-11
·
CVE-2019-3665
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
McAfee Web Advisor versions prior to 4.1.1.48
Description
A Code Injection issue in the web interface of McAfee Web Advisor allows a remote unauthenticated attacker to bypass the normal blocking functionality of Web Advisor by rendering a carefully crafted website.
Recommendations
For versions prior to 4.1.1.48, update to version 4.1.1.48 or later to resolve the issue.
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mcafee Web Advisor