Skip to content
OpenAdvisories
High · 8.0 CVE-2019-3630 EUVD-2019-13265GHSA-8f8r-5c27-46fh

Command Injection could allow authenticated users to execute arbitrary code

Published Jun 27, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Vendor: McAfee Product: McAfee Enterprise Security Manager (ESM)

Description

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

Affected products

VendorProductAffectedFixed
McAfee McAfee Enterprise Security Manager (ESM) 11.x – < 11.2.0, 10.x – < 10.4.0 11.2.0

References