Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-3586

Опубликовано: 15 мая 2019
Источник: nvd
CVSS3: 7.5
CVSS3: 7.5
CVSS2: 5.1
EPSS Низкий

Описание

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*
Версия от 10.0.0 (включая) до 10.6.1 (включая)
cpe:2.3:a:mcafee:endpoint_security:10.6.1:201905:*:*:*:*:*:*

EPSS

Процентиль: 50%
0.00271
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-693
NVD-CWE-Other

Связанные уязвимости

github
больше 3 лет назад

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.

EPSS

Процентиль: 50%
0.00271
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-693
NVD-CWE-Other