CVE-2019-3629

EUVD-2019-13264
Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
trellixCNA
8.3 HIGH
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
mcafeeenterprise_security_manager
𝑥
< 10.4.0
mcafeeenterprise_security_manager
11.0.0 ≤
𝑥
< 11.2.0
𝑥
= Vulnerable software versions
References
https://kc.mcafee.com/corporate/index?page=content&id=SB10284
https://kc.mcafee.com/corporate/index?page=content&id=SB10284