What is CVE-2019-3654?

CVE-2019-3654 is a medium-severity vulnerability in Mcafee Client Proxy, classified under Improper Authentication. CVSS score: 5.3/10. Published 2019-11-22.

How severe is CVE-2019-3654?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Auth bypass in Mcafee Client Proxy

CVE-2019-3654

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be generated by the network administrator.

Vulnerability class: Broken Authentication

EPSS: 0.007 (48.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H.

Affected products

Mcafee Client_proxy
Mcafee Client Proxy (Mcp) — versions unspecified
Microsoft Windows

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

trellixpsirt@trellix.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2019-3654?: CVE-2019-3654 is a medium-severity vulnerability in Mcafee Client Proxy, classified under Improper Authentication. CVSS score: 5.3/10. Published 2019-11-22.
How severe is CVE-2019-3654?: Medium severity. CVSS v3 base score is 5.3 out of 10.