VULNERABILITY INTELLIGENCE
CVE-2019-3653
CVSS score4.6 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2019-10-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:N
Description
Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.
Weakness classification
- CWE-284: Improper Access Control