CVE-2019-3595 - CVE House

Back to Database

Status published Low CVE-2019-3595

DLP Endpoint ePO extension not sanitizing CSV exports

2 CVSS

Vulnerability Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') in ePO extension in McAfee Data Loss Prevention (DLP) 11.x prior to 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via a specially crafted DLP policy, which is exported and opened on the their machine. In our checks, the user must explicitly allow the code to execute.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3595

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from McAfee, LLC

View All →

Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and ...

Improper Authorization vulnerability in MA

Incorrect Permission Assignment for Critical Resource

Unquoted service executable path in McAfee Endpoint Security (ENS)

Server-Side Request Forgery (SSRF) in MVISION Endpoint ePO extension

Affected Vendor

McAfee, LLC

View all reports →

Affected Software

DLP Endpoint ePO extension

Vulnerable Versions:

11.x

Timeline

Official Publish: July 24th, 2019

Last Modified: August 4th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1005 Data from Local System

T1041 Exfiltration Over C2 Channel