VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Oct 9, 2019· Updated Jun 17, 2026

CVE-2019-3653

CVE-2019-3653

Description

Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.

Affected products

4
  • McAfee, LLC/McAfee Endpoint Security (ENS)v5
    Range: 10.6.x
  • McAfee/Endpoint Security3 versions
    cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*range: >=10.5.0,<=10.5.5
    • cpe:2.3:a:mcafee:endpoint_security:10.16.1:-:*:*:*:*:*:*
    • (no CPE)range: <10.6.1 October 2019 Update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.