CVE-2019-3619

Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 allows remote unauthenticated attacker to view sensitive information in plain text via sniffing the traffic between the Agent Handler and the SQL server.

Score

CVSS 3.0 6.8 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2019-07-03

Last modified

2024-08-04

Weaknesses

CWE-319

Affected products

• Epolicy Orchestrator (Mcafee)
• Mcafee Epolicy Orchestrator Epo (Mcafee Llc)

References

• http://www.securityfocus.com/bid/109066
• https://kc.mcafee.com/corporate/index?page=content&id=SB10286