CVE-2019-3586
Summary
| CVE | CVE-2019-3586 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-05-15 16:29:00 UTC |
| Updated | 2023-11-07 03:09:00 UTC |
| Description | Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mcafee | Endpoint Security | 10.6.1 | 201905 | All | All |
| Application | Mcafee | Endpoint Security | 10.6.1 | 201905 | All | All |
| Application | Mcafee | Endpoint Security | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| McAfee Security Bulletin - Endpoint Security fixes firewall not blocking all Global Threat Intelligence flagged IP addresses vulnerability (CVE-2019-3586) | CONFIRM | kc.mcafee.com | Vendor Advisory |
| Malformed Request | www.securityfocus.com | ||
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 372435 McAfee Endpoint Security Firewall Not Blocking All GTI Flagged IP Addresses Vulnerability