PT-2019-4246 · Mcafee · Mcafee Data Loss Prevention

Published 2019-11-12 · Updated 2020-08-24 · CVE-2019-3640

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention versions prior to 11.4.0

Description The issue is related to the unprotected transport of credentials in the ePO extension, allowing remote attackers with network access to collect login details to the LDAP server. This is due to the ePO extension not using a secure connection when testing LDAP connectivity. The vulnerability can be exploited by a remote attacker to gain unauthorized access to protected information.

Recommendations For McAfee Data Loss Prevention versions prior to 11.4.0, update to version 11.4.0 or later to resolve the issue. As a temporary workaround, consider disabling the ePO extension until a patch is available. Restrict access to the LDAP server to minimize the risk of exploitation. Avoid using the ePO extension for testing LDAP connectivity until the issue is resolved.

Fix

Insufficiently Protected Credentials

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-522

CWE-319

Related Identifiers

BDU:2019-04847

CVE-2019-3640

Affected Products

Mcafee Data Loss Prevention

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-3640 · Security Note
• https://bdu.fstec.ru/vul/2019-04847 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3640 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10298 · Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10298 · Note