CVE-2019-3586

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.

CVSS v3 7.5 HIGH
CVSS v2.0 5.1 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.6 / Impact : 5.3

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope CHANGED

5.1^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/108416
https://kc.mcafee.com/corporate/index?page=content&id=SB10280
http://www.securityfocus.com/bid/108416
https://kc.mcafee.com/corporate/index?page=content&id=SB10280

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mcafee:endpoint_security::::::::
	cpe:2.3:a:mcafee:endpoint_security:10.6.1:201905::::::

History

21 Nov 2024, 04:42

Type	Values Removed	Values Added
References	~~() http://www.securityfocus.com/bid/108416 -~~	() http://www.securityfocus.com/bid/108416 -
References	~~() https://kc.mcafee.com/corporate/index?page=content&id=SB10280 -~~	() https://kc.mcafee.com/corporate/index?page=content&id=SB10280 -

07 Nov 2023, 03:09

Type	Values Removed	Values Added
References	~~(BID) http://www.securityfocus.com/bid/108416 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/108416 -
References	~~(CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10280 - Vendor Advisory~~	() https://kc.mcafee.com/corporate/index?page=content&id=SB10280 -

Information

Published : 2019-05-15 16:29

Updated : 2024-11-21 04:42

NVD link : CVE-2019-3586

Mitre link : CVE-2019-3586

CVE.ORG link : CVE-2019-3586

JSON object : View

Products Affected

mcafee

endpoint_security

CWE

CWE-693

Protection Mechanism Failure

NVD-CWE-Other

{"id": "CVE-2019-3586", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Secondary", "source": "trellixpsirt@trellix.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 5.3, "exploitabilityScore": 1.6}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 5.3, "exploitabilityScore": 1.6}]}, "published": "2019-05-15T16:29:00.550", "references": [{"url": "http://www.securityfocus.com/bid/108416", "source": "trellixpsirt@trellix.com"}, {"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10280", "source": "trellixpsirt@trellix.com"}, {"url": "http://www.securityfocus.com/bid/108416", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10280", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "trellixpsirt@trellix.com", "description": [{"lang": "en", "value": "CWE-693"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection."}, {"lang": "es", "value": "Una falla del mecanismo de protecci\u00f3n en el Firewall en McAfee Endpoint Security (ENS) 10.x anterior a 10.6.1 de Mayo de 2019 permite a los atacantes del tipo context-dependent eludir la protecci\u00f3n ENS donde las direcciones IP identificadas con GTI no est\u00e1n bloqueadas por el Firewall ENS por medio de sitios maliciosos especialmente creados donde la reputaci\u00f3n de GTI es manipulada cuidadosamente y no activa correctamente el Firewall ENS para bloquear la conexi\u00f3n."}], "lastModified": "2024-11-21T04:42:13.207", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A079D9DB-D2B6-47D2-956B-D488D5CF2B86", "versionEndIncluding": "10.6.1", "versionStartIncluding": "10.0.0"}, {"criteria": "cpe:2.3:a:mcafee:endpoint_security:10.6.1:201905:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74D3A76C-3A30-41A5-A065-AF8904EC81B4"}], "operator": "OR"}]}], "sourceIdentifier": "trellixpsirt@trellix.com"}