VULNERABILITY INTELLIGENCE
CVE-2019-3640
CVSS score4.8 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2019-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N
Description
Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity.
Weakness classification
- CWE-319: Cleartext Transmission of Sensitive Information