CVE-2019-3653: ESConfig Tool access not controlled
First published: Wed Oct 09 2019(Updated: )
Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.
Credit: psirt@mcafee.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Endpoint Security | >=10.5.0<=10.5.5 | |
| Mcafee Endpoint Security | >=10.6.0<10.6.1 | |
| Mcafee Endpoint Security | =10.16.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-3653?
CVE-2019-3653 is an improper access control vulnerability in the Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update.
How does CVE-2019-3653 work?
CVE-2019-3653 allows a local user to gain access to security configuration by unauthorized use of the configuration tool.
What software is affected by CVE-2019-3653?
McAfee Endpoint Security versions prior to 10.6.1 October 2019 Update and 10.16.1 are affected by CVE-2019-3653.
What is the severity of CVE-2019-3653?
CVE-2019-3653 has a severity rating of 5.5 (Medium).
How can I fix CVE-2019-3653?
To fix CVE-2019-3653, users should update to McAfee Endpoint Security version 10.6.1 October 2019 Update or later.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/references
- agent/title
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/mcafee
- canonical/mcafee endpoint security
- version/mcafee endpoint security/10.5.0
- version/mcafee endpoint security/10.5.5
- version/mcafee endpoint security/10.6.0
- version/mcafee endpoint security/10.16.1