CVE-2019-3644 - Vulnerability Details

Vendors	Products
Mcafee	Active Response Advanced Threat Defense Enterprise Security Manager Web Gateway

Link	Providers
https://kc.mcafee.com/corporate/index?page=content&id=SB10296

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "McAfee Web Gateway (MWG)", "vendor": "McAfee, LLC", "versions": [{"lessThan": "7.8.2.13", "status": "affected", "version": "7.8.2.13", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"description": "Denial of Service", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-09-11T14:08:37", "orgId": "01626437-bf8f-4d1c-912a-893b5eb04808", "shortName": "trellix"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296"}], "source": {"discovery": "EXTERNAL"}, "title": "MWG scanners updated to address CVE-2019-9517", "x_generator": {"engine": "Vulnogram 0.0.8"}, "x_legacyV4Record": {"CVE_data_meta": {"AKA": "", "ASSIGNER": "psirt@mcafee.com", "DATE_PUBLIC": "", "ID": "CVE-2019-3644", "STATE": "PUBLIC", "TITLE": "MWG scanners updated to address CVE-2019-9517"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "McAfee Web Gateway (MWG)", "version": {"version_data": [{"platform": "", "version_affected": "<", "version_name": "7.8.2.13", "version_value": "7.8.2.13"}]}}]}, "vendor_name": "McAfee, LLC"}]}}, "configuration": [], "credit": [], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies."}]}, "exploit": [], "generator": {"engine": "Vulnogram 0.0.8"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Denial of Service"}]}]}, "references": {"reference_data": [{"name": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296", "refsource": "CONFIRM", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296"}]}, "solution": [], "source": {"advisory": "", "defect": [], "discovery": "EXTERNAL"}, "work_around": []}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T19:12:09.706Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296"}]}]}, "cveMetadata": {"assignerOrgId": "01626437-bf8f-4d1c-912a-893b5eb04808", "assignerShortName": "trellix", "cveId": "CVE-2019-3644", "datePublished": "2019-09-11T14:08:37.545857Z", "dateReserved": "2019-01-03T00:00:00", "dateUpdated": "2024-09-17T01:11:51.259Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : McAfee Web Gateway (MWG) (string)

vendor : McAfee, LLC (string)

versions : [ »

0 : { »

lessThan : 7.8.2.13 (string)

status : affected (string)

version : 7.8.2.13 (string)

versionType : custom (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Denial of Service (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2019-09-11T14:08:37 (string)

orgId : 01626437-bf8f-4d1c-912a-893b5eb04808 (string)

shortName : trellix (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10296 (string)

}

]

source : { »

discovery : EXTERNAL (string)

}

title : MWG scanners updated to address CVE-2019-9517 (string)

x_generator : { »

engine : Vulnogram 0.0.8 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

AKA : (string)

ASSIGNER : psirt@mcafee.com (string)

DATE_PUBLIC : (string)

ID : CVE-2019-3644 (string)

STATE : PUBLIC (string)

TITLE : MWG scanners updated to address CVE-2019-9517 (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : McAfee Web Gateway (MWG) (string)

version : { »

version_data : [ »

0 : { »

platform : (string)

version_affected : < (string)

version_name : 7.8.2.13 (string)

version_value : 7.8.2.13 (string)

}

]

}

]

}

vendor_name : McAfee, LLC (string)

}

]

}

configuration : [ *empty* ]

credit : [ *empty* ]

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies. (string)

}

]

}

exploit : [ *empty* ]

generator : { »

engine : Vulnogram 0.0.8 (string)

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Denial of Service (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://kc.mcafee.com/corporate/index?page=content&id=SB10296 (string)

refsource : CONFIRM (string)

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10296 (string)

}

]

}

solution : [ *empty* ]

source : { »

advisory : (string)

defect : [ *empty* ]

discovery : EXTERNAL (string)

}

work_around : [ *empty* ]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T19:12:09.706Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10296 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 01626437-bf8f-4d1c-912a-893b5eb04808 (string)

assignerShortName : trellix (string)

cveId : CVE-2019-3644 (string)

datePublished : 2019-09-11T14:08:37.545857Z (string)

dateReserved : 2019-01-03T00:00:00 (string)

dateUpdated : 2024-09-17T01:11:51.259Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:active_response:1.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "D84C7BA1-9DDC-4EC1-AE5E-C037CFE8D8F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:active_response:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "AECD820D-0433-410A-AED5-46F2CB6BE911", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:active_response:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "5209C02C-3C70-4830-B0A3-C64D79DC5A6B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:active_response:2.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "05BAC6A6-DF1E-4376-B9CF-05F40F745ED4", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:active_response:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "4C790D75-4B4B-4FDC-965D-0FB63F99797E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:active_response:2.2:*:*:*:*:*:*:*", "matchCriteriaId": "9BB28220-53E3-4BEC-9DE4-F57D641E202A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:active_response:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "4E8E6BD8-3E75-424D-8B05-B09D3650565B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:active_response:2.4:*:*:*:*:*:*:*", "matchCriteriaId": "C2EACF29-7767-434F-94BD-7B2F95C69C29", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:advanced_threat_defense:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "6B77E862-D629-42CC-B8D9-53FB797C678D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:advanced_threat_defense:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "86D15C17-0E8F-4AE8-A120-DFBF23E87FF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:advanced_threat_defense:4.4:*:*:*:*:*:*:*", "matchCriteriaId": "FAFF84E7-8137-44CE-912C-5F3D4CDBEA58", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:advanced_threat_defense:4.6:*:*:*:*:*:*:*", "matchCriteriaId": "5471CB75-40E0-4A48-A3BA-68E7623E6BDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:10.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "12E31BFB-141E-4B03-A771-5ED37D79F5DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:10.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "E8A9A863-DE4A-464D-A95D-F64876607B9E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:10.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "C3F2E6B6-6887-43D1-A4B6-366E855E118B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:11.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "941E2766-3FA7-46C1-A912-C25E1FBFC532", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:11.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "BA0E7A4F-FE75-4AA8-A687-5453E8044305", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:11.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "020FFFB9-5900-4BED-95AC-03E70835D59F", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:11.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "69D535AD-3802-449B-8A1B-FCD052687603", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:11.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "CC652A9C-112C-4FCF-9CB3-21AECF9CAAF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:enterprise_security_manager:11.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "34F344E3-FB8C-418F-80F4-D24971F624E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "matchCriteriaId": "765E9856-2748-4A8B-91F5-A4DB3C8C547A", "versionEndExcluding": "7.7.2.24", "versionStartIncluding": "7.7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "matchCriteriaId": "3C824161-E723-44FC-AED9-808787FF5823", "versionEndExcluding": "7.8.2.13", "versionStartIncluding": "7.8.2", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*", "matchCriteriaId": "3BAFC518-9D1C-4D93-8E87-A01F4B9BF71F", "versionEndExcluding": "8.2.0", "versionStartIncluding": "8.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies."}, {"lang": "es", "value": "McAfee Web Gateway (MWG) versiones anteriores a 7.8.2.13, es vulnerable para un atacante remoto que explota el CVE-2019-9517, conllevando potencialmente a una denegaci\u00f3n de servicio. Esto afecta los proxies de escaneo."}], "id": "CVE-2019-3644", "lastModified": "2024-11-21T04:42:17.290", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "trellixpsirt@trellix.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-09-11T15:15:11.763", "references": [{"source": "trellixpsirt@trellix.com", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10296"}], "sourceIdentifier": "trellixpsirt@trellix.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:mcafee:active_response:1.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : D84C7BA1-9DDC-4EC1-AE5E-C037CFE8D8F7 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:mcafee:active_response:1.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : AECD820D-0433-410A-AED5-46F2CB6BE911 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:mcafee:active_response:2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 5209C02C-3C70-4830-B0A3-C64D79DC5A6B (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:mcafee:active_response:2.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 05BAC6A6-DF1E-4376-B9CF-05F40F745ED4 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:mcafee:active_response:2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C790D75-4B4B-4FDC-965D-0FB63F99797E (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:mcafee:active_response:2.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 9BB28220-53E3-4BEC-9DE4-F57D641E202A (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:mcafee:active_response:2.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 4E8E6BD8-3E75-424D-8B05-B09D3650565B (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:mcafee:active_response:2.4:*:*:*:*:*:*:* (string)

matchCriteriaId : C2EACF29-7767-434F-94BD-7B2F95C69C29 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:mcafee:advanced_threat_defense:4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B77E862-D629-42CC-B8D9-53FB797C678D (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:mcafee:advanced_threat_defense:4.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 86D15C17-0E8F-4AE8-A120-DFBF23E87FF2 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:mcafee:advanced_threat_defense:4.4:*:*:*:*:*:*:* (string)

matchCriteriaId : FAFF84E7-8137-44CE-912C-5F3D4CDBEA58 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:mcafee:advanced_threat_defense:4.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 5471CB75-40E0-4A48-A3BA-68E7623E6BDB (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:10.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 12E31BFB-141E-4B03-A771-5ED37D79F5DF (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:10.3.4:*:*:*:*:*:*:* (string)

matchCriteriaId : E8A9A863-DE4A-464D-A95D-F64876607B9E (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:10.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C3F2E6B6-6887-43D1-A4B6-366E855E118B (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:11.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 941E2766-3FA7-46C1-A912-C25E1FBFC532 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:11.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : BA0E7A4F-FE75-4AA8-A687-5453E8044305 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:11.1.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 020FFFB9-5900-4BED-95AC-03E70835D59F (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:11.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 69D535AD-3802-449B-8A1B-FCD052687603 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:11.1.3:*:*:*:*:*:*:* (string)

matchCriteriaId : CC652A9C-112C-4FCF-9CB3-21AECF9CAAF4 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:mcafee:enterprise_security_manager:11.2.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 34F344E3-FB8C-418F-80F4-D24971F624E6 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 765E9856-2748-4A8B-91F5-A4DB3C8C547A (string)

versionEndExcluding : 7.7.2.24 (string)

versionStartIncluding : 7.7.2.0 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3C824161-E723-44FC-AED9-808787FF5823 (string)

versionEndExcluding : 7.8.2.13 (string)

versionStartIncluding : 7.8.2 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3BAFC518-9D1C-4D93-8E87-A01F4B9BF71F (string)

versionEndExcluding : 8.2.0 (string)

versionStartIncluding : 8.0.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : McAfee Web Gateway (MWG) earlier than 7.8.2.13 is vulnerable to a remote attacker exploiting CVE-2019-9517, potentially leading to a denial of service. This affects the scanning proxies. (string)

}

1 : { »

lang : es (string)

value : McAfee Web Gateway (MWG) versiones anteriores a 7.8.2.13, es vulnerable para un atacante remoto que explota el CVE-2019-9517, conllevando potencialmente a una denegación de servicio. Esto afecta los proxies de escaneo. (string)

}

]

id : CVE-2019-3644 (string)

lastModified : 2024-11-21T04:42:17.290 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : trellixpsirt@trellix.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2019-09-11T15:15:11.763 (string)

references : [ »

0 : { »

source : trellixpsirt@trellix.com (string)

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10296 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://kc.mcafee.com/corporate/index?page=content&id=SB10296 (string)

}

]

sourceIdentifier : trellixpsirt@trellix.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object