CVE-2019-3595: DLP Endpoint ePO extension not sanitizing CSV exports
First published: Wed Jul 24 2019(Updated: )
Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via a specially crafted DLP policy, which is exported and opened on the their machine. In our checks, the user must explicitly allow the code to execute.
Credit: psirt@mcafee.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Data Loss Prevention Endpoint | >=11.0<11.1.200 | |
| Mcafee Data Loss Prevention Endpoint | >=11.2.000<11.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-3595.
What is the severity of CVE-2019-3595?
CVE-2019-3595 has a severity of 6.5 (medium).
What is the affected software for CVE-2019-3595?
The affected software for CVE-2019-3595 is McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0.
How does CVE-2019-3595 work?
CVE-2019-3595 allows an Authenticated Administrator to execute arbitrary code with their local machine privileges via a specially crafted DLP policy in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0.
Are there any references for CVE-2019-3595?
Yes, you can find more information about CVE-2019-3595 at the following links: [SecurityFocus](http://www.securityfocus.com/bid/109377) and [McAfee Knowledge Center](https://kc.mcafee.com/corporate/index?page=content&id=SB10289).
- collector/nvd-index
- agent/weakness
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/mcafee
- canonical/mcafee data loss prevention endpoint
- version/mcafee data loss prevention endpoint/11.0
- version/mcafee data loss prevention endpoint/11.2.000