CVE-2019-3653CWE-284

ESConfig Tool access not controlled

Medium · published October 9, 2019

CVSS v3.1
4.6
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-10-09T14:21Z
EPSS history
Timeline
  • 09 OCT 14:21Z
    ESConfig Tool access not controlled
    cvelistv5