CVE-2019-3582: McAfee Endpoint Security updates fix a privilege escalation vulnerability
First published: Thu Feb 28 2019(Updated: )
Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances.
Credit: psirt@mcafee.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Endpoint Security | <=10.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this privilege escalation vulnerability?
The vulnerability ID for this privilege escalation vulnerability is CVE-2019-3582.
What is the affected software for this vulnerability?
The affected software for this vulnerability is McAfee Endpoint Security (ENS) version 10.6.1 and earlier.
How does this vulnerability allow local users to gain elevated privileges?
This vulnerability allows local users to gain elevated privileges through a specific set of circumstances.
What is the severity of CVE-2019-3582?
The severity of CVE-2019-3582 is high, with a severity value of 7.8.
How can I fix this privilege escalation vulnerability?
To fix this vulnerability, update McAfee Endpoint Security to version 10.6.2 or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/remedy
- agent/references
- agent/last-modified-date
- agent/author
- agent/description
- agent/tags
- agent/event
- vendor/mcafee
- canonical/mcafee endpoint security
- version/mcafee endpoint security/10.6.1