What is CVE-2019-3586?

CVE-2019-3586 is a high-severity vulnerability in Mcafee Endpoint_security, classified under Protection Mechanism Failure. CVSS score: 7.5/10. Published 2019-05-15.

How severe is CVE-2019-3586?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Mcafee Endpoint_security

CVE-2019-3586

Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS F…

EPSS: 0.008 (50.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:H.

Affected products

Mcafee Endpoint_security — versions 10.6.1
Mcafee, Llc Mcafee Endpoint Security (Ens) — versions 10.x

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)
trellixpsirt@trellix.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-3586?: CVE-2019-3586 is a high-severity vulnerability in Mcafee Endpoint_security, classified under Protection Mechanism Failure. CVSS score: 7.5/10. Published 2019-05-15.
How severe is CVE-2019-3586?: High severity. CVSS v3 base score is 7.5 out of 10.