Skip to content
OpenAdvisories
High · 8.3 CVE-2019-3629 EUVD-2019-13264GHSA-736c-q36g-prw3

Application protections bypass vulnerability could allow unauthenticated user to impersonate system users

Published Jun 27, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Vendor: McAfee Product: McAfee Enterprise Security Manager (ESM)

Description

Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.

Affected products

VendorProductAffectedFixed
McAfee McAfee Enterprise Security Manager (ESM) 11.x – < 11.2.0, 10.x – < 10.4.0 11.2.0

References