PT-2019-2545 · Mcafee · Mcafee Agent

Published 2019-02-26 · Updated 2022-04-05 · CVE-2019-3599

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Agent versions 5.x

Description The issue is related to an Information Disclosure vulnerability in the Remote logging component of McAfee Agent. This component is disabled by default. When enabled, it allows remote unauthenticated users to access sensitive information. The vulnerability is associated with a lack of protection for service data, which can be exploited by a remote attacker to disclose protected information.

Recommendations For McAfee Agent version 5.x, consider disabling the Remote logging feature to prevent exploitation until a fix is available. Restrict access to sensitive information and ensure that Remote logging is only enabled when necessary, with appropriate security measures in place. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2019-02393

CVE-2019-3599

Affected Products

Mcafee Agent

References · 6

• https://bdu.fstec.ru/vul/2019-02393 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3599 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10271&actp=null&viewlocale=en_US&showDraft=false&platinum_status=false&locale=en_GB · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10271&actp=null&viewlocale=en_US&showDraft=false&platinum_status=false&locale=en_GB · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10271 · Note