CVE-2019-3615

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.

Score

CVSS 3.0 6.8 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2019-03-12

Last modified

2024-08-04

Weaknesses

CWE-200

Affected products

• Database Security (Mcafee)
• Mcafee Database Security Dam (Mcafee Lcc)

References

• http://www.securityfocus.com/bid/107385
• https://kc.mcafee.com/corporate/index?page=content&id=SB10277