CVE-2019-3588CWE-269

Using VSE to bypass Windows Credentials on Lock screen

Medium · published June 10, 2020

CVSS v3.1
6.3
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-06-10T11:47Z
EPSS history
Timeline
  • 10 JUN 11:47Z
    Using VSE to bypass Windows Credentials on Lock screen
    cvelistv5