CVE-2019-3629 Application protections bypass vulnerability could allow unauthenticated user to impersonate system users
Unauthenticated attackers can impersonate system users in McAfee Enterprise Security Manager, leading to unauthorized access and privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-3629?
CVE-2019-3629 is a high-severity authentication bypass vulnerability in McAfee, LLC McAfee Enterprise Security Manager (ESM), published on 27 Jun 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Application protection bypass vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters.
Which versions are affected by CVE-2019-3629?
It affects 1 product.
Products include Mcafee Enterprise Security Manager.
How do I fix CVE-2019-3629?
No fix has been published for CVE-2019-3629 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2019-3629 being exploited?
There is no known exploitation of CVE-2019-3629 in the wild and no public exploit code.
Other vulnerabilities in McAfee, LLC McAfee Enterprise Security Manager (ESM)
- CVE-2019-3632 Directory Traversal vulnerability could lead to elevated privileges
- CVE-2019-3630 Command Injection could allow authenticated users to execute arbitrary code
- CVE-2019-3631 Command Injection could allow authenticated users to execute arbitrary code
- CVE-2019-3628 Privilege escalation could allow authenticated user to gain access to a core system
- CVE-2015-7310 Command injection in n/a
Sources
Also known as GHSA-736c-q36g-prw3.