Vulnerability-Lookup

CNVD-2019-41632

Vulnerability from cnvd - Published: 2019-11-21

Title

McAfee Data Loss Prevention Endpoint ePO extension存在未明漏洞

Description

McAfee Data Loss Prevention Endpoint（DLPe）是美国迈克菲（McAfee）公司的一套集成式终端数据保护解决方案。该方案能够防止机密数据被盗和意外泄露，并提供针对文件处理和传输的安全策略、共享终端数据流控制和数据加密等功能。ePO extension是使用在其中的一个集中式安全管理扩展程序。 McAfee Data Loss Prevention Endpoint 11.4.0之前的11.x版本中的ePO extension存在安全漏洞，该漏洞源于在传输凭证时，未能进行保护措施，远程攻击者可利用该漏洞获取登录信息。

Severity

中

Patch Name

McAfee Data Loss Prevention Endpoint ePO extension存在未明漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://kc.mcafee.com/corporate/index?page=content&id=SB10298

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-3640

Impacted products

Name
McAfee Data Loss Prevention Endpoint 11.*，<11.4.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-3640",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3640"
    }
  },
  "description": "McAfee Data Loss Prevention Endpoint\uff08DLPe\uff09\u662f\u7f8e\u56fd\u8fc8\u514b\u83f2\uff08McAfee\uff09\u516c\u53f8\u7684\u4e00\u5957\u96c6\u6210\u5f0f\u7ec8\u7aef\u6570\u636e\u4fdd\u62a4\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u80fd\u591f\u9632\u6b62\u673a\u5bc6\u6570\u636e\u88ab\u76d7\u548c\u610f\u5916\u6cc4\u9732\uff0c\u5e76\u63d0\u4f9b\u9488\u5bf9\u6587\u4ef6\u5904\u7406\u548c\u4f20\u8f93\u7684\u5b89\u5168\u7b56\u7565\u3001\u5171\u4eab\u7ec8\u7aef\u6570\u636e\u6d41\u63a7\u5236\u548c\u6570\u636e\u52a0\u5bc6\u7b49\u529f\u80fd\u3002ePO extension\u662f\u4f7f\u7528\u5728\u5176\u4e2d\u7684\u4e00\u4e2a\u96c6\u4e2d\u5f0f\u5b89\u5168\u7ba1\u7406\u6269\u5c55\u7a0b\u5e8f\u3002\n\nMcAfee Data Loss Prevention Endpoint 11.4.0\u4e4b\u524d\u768411.x\u7248\u672c\u4e2d\u7684ePO extension\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5728\u4f20\u8f93\u51ed\u8bc1\u65f6\uff0c\u672a\u80fd\u8fdb\u884c\u4fdd\u62a4\u63aa\u65bd\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u767b\u5f55\u4fe1\u606f\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10298",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-41632",
  "openTime": "2019-11-21",
  "patchDescription": "McAfee Data Loss Prevention Endpoint\uff08DLPe\uff09\u662f\u7f8e\u56fd\u8fc8\u514b\u83f2\uff08McAfee\uff09\u516c\u53f8\u7684\u4e00\u5957\u96c6\u6210\u5f0f\u7ec8\u7aef\u6570\u636e\u4fdd\u62a4\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u80fd\u591f\u9632\u6b62\u673a\u5bc6\u6570\u636e\u88ab\u76d7\u548c\u610f\u5916\u6cc4\u9732\uff0c\u5e76\u63d0\u4f9b\u9488\u5bf9\u6587\u4ef6\u5904\u7406\u548c\u4f20\u8f93\u7684\u5b89\u5168\u7b56\u7565\u3001\u5171\u4eab\u7ec8\u7aef\u6570\u636e\u6d41\u63a7\u5236\u548c\u6570\u636e\u52a0\u5bc6\u7b49\u529f\u80fd\u3002ePO extension\u662f\u4f7f\u7528\u5728\u5176\u4e2d\u7684\u4e00\u4e2a\u96c6\u4e2d\u5f0f\u5b89\u5168\u7ba1\u7406\u6269\u5c55\u7a0b\u5e8f\u3002\r\n\r\nMcAfee Data Loss Prevention Endpoint 11.4.0\u4e4b\u524d\u768411.x\u7248\u672c\u4e2d\u7684ePO extension\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5728\u4f20\u8f93\u51ed\u8bc1\u65f6\uff0c\u672a\u80fd\u8fdb\u884c\u4fdd\u62a4\u63aa\u65bd\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u767b\u5f55\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "McAfee Data Loss Prevention Endpoint ePO extension\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "McAfee Data Loss Prevention Endpoint 11.*\uff0c\u003c11.4.0"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-3640",
  "serverity": "\u4e2d",
  "submitTime": "2019-11-13",
  "title": "McAfee Data Loss Prevention Endpoint ePO extension\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

CVE-2019-3640 (GCVE-0-2019-3640)

Vulnerability from cvelistv5 – Published: 2019-11-14 00:05 – Updated: 2024-08-04 19:12

Title

Data Loss Prevention - Unprotected Transport of Credentials

Summary

Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity.

Severity ?

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

CWE

Unprotected Transport of Credentials

Assigner

trellix

References

URL

Tags

https://kc.mcafee.com/corporate/index?page=conten…

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	McAfee	Data Loss Prevention	Affected: 11.x , < 11.4.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:12:09.699Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10298"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Data Loss Prevention",
          "vendor": "McAfee",
          "versions": [
            {
              "lessThan": "11.4.0",
              "status": "affected",
              "version": "11.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Unprotected Transport of Credentials",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-11-14T00:05:53",
        "orgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
        "shortName": "trellix"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10298"
        }
      ],
      "source": {
        "advisory": "SB10298",
        "discovery": "EXTERNAL"
      },
      "title": "Data Loss Prevention - Unprotected Transport of Credentials",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@mcafee.com",
          "ID": "CVE-2019-3640",
          "STATE": "PUBLIC",
          "TITLE": "Data Loss Prevention - Unprotected Transport of Credentials"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Data Loss Prevention",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "11.x",
                            "version_value": "11.4.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "McAfee"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unprotected Transport of Credentials in ePO extension in McAfee Data Loss Prevention 11.x prior to 11.4.0 allows remote attackers with access to the network to collect login details to the LDAP server via the ePO extension not using a secure connection when testing LDAP connectivity."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Unprotected Transport of Credentials"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10298",
              "refsource": "MISC",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10298"
            }
          ]
        },
        "source": {
          "advisory": "SB10298",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
    "assignerShortName": "trellix",
    "cveId": "CVE-2019-3640",
    "datePublished": "2019-11-14T00:05:53",
    "dateReserved": "2019-01-03T00:00:00",
    "dateUpdated": "2024-08-04T19:12:09.699Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2019-41632

CVE-2019-3640 (GCVE-0-2019-3640)

Tags

Sightings

Nomenclature