What is CVE-2019-3615?

CVE-2019-3615 is a medium-severity vulnerability in Mcafee Database Security, classified under Information Disclosure. CVSS score: 5.3/10. Published 2019-03-12.

How severe is CVE-2019-3615?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Mcafee Database Security

CVE-2019-3615

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.

Vulnerability class: Information Disclosure

EPSS: 0.003 (26.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Mcafee Database_security
Mcafee, Lcc Mcafee Database Security (Dam) — versions unspecified

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)
trellixpsirt@trellix.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-3615?: CVE-2019-3615 is a medium-severity vulnerability in Mcafee Database Security, classified under Information Disclosure. CVSS score: 5.3/10. Published 2019-03-12.
How severe is CVE-2019-3615?: Medium severity. CVSS v3 base score is 5.3 out of 10.