1. Home
  2. CVE Database
  3. CVE-2019-3654
MEDIUM · 5.3

CVE-2019-3654

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for...

Vulnerability Description

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be generated by the network administrator.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
McafeeClient Proxy< 3.0.0
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2019-3654?

CVE-2019-3654 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for...

How severe is CVE-2019-3654?

CVE-2019-3654 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-3654?

Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Client Proxy, Microsoft Windows.