ID CVE-2019-3582
Summary Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances.
References
Vulnerable Configurations
  • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.1:-:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.1:-:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.1:hotfix1:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.1:hotfix1:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.1:hotfix2:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.1:hotfix2:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.2:-:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.2:-:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.2:hotfix1:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.2:hotfix1:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.2:hotfix2:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.2:hotfix2:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.6:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.6:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.7:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.7:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.8:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.8:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.9:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.9:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.5.10:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.5.10:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.6.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.6.1:*:*:*:*:macos:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.6.1:*:*:*:*:macos:*:*
  • cpe:2.3:a:mcafee:endpoint_security:10.6.1:*:*:*:*:windows:*:*
    cpe:2.3:a:mcafee:endpoint_security:10.6.1:*:*:*:*:windows:*:*
CVSS
Base: 6.1 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL COMPLETE PARTIAL
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:C/A:P
refmap via4
confirm https://kc.mcafee.com/corporate/index?page=content&id=SB10254
Last major update 24-08-2020 - 17:37
Published 28-02-2019 - 15:29
Last modified 24-08-2020 - 17:37
Back to Top