Data Leakage Vulnerability in McAfee Database Security web interface

5.3 CVSS

Vulnerability Description

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3615

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from McAfee, LCC

View All →

CVE-2019-3636

File masquerade attack vulnerability in McAfee Total Protection

High 7.5

Affected Vendor

McAfee, LCC

View all reports →

Affected Software

McAfee Database Security (DAM)

Vulnerable Versions:

unspecified

Timeline

Official Publish: March 12th, 2019

Last Modified: August 4th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.