Skip to content
OpenAdvisories
Medium · 4.6 CVE-2019-3653 EUVD-2019-13288GHSA-jcfm-vp6v-gw5w

ESConfig Tool access not controlled

Published Oct 9, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Description

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.

Affected products

VendorProductAffectedFixed
McAfee McAfee Endpoint Security (ENS) 10.6.x – < 10.6.1, 10.5.x – < 10.5.5 10.6.1

References