CVE-2019-3615 - Data Leakage Vulnerability in McAfee Database Security web interface · CoreCVE

Back Back to CVE browser

MEDIUM

Data Leakage Vulnerability in McAfee Database Security web interface

Published Mar 12, 2019

6.8

MEDIUM

CVSS 3.0

EPSS 0.33%

Description

Data Leakage Attacks vulnerability in the web interface in McAfee Database Security prior to the 4.6.6 March 2019 update allows local users to expose passwords via incorrectly auto completing password fields in the admin browser login screen.

Affected products

Vendor McAfee, LCC Product McAfee Database Security (DAM) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <4.6.6 March 2019 Update

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

McAfee Database Security (DAM)

n/a

Version	Status	Constraints
unspecified	affected	<4.6.6 March 2019 Update

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

http://www.securityfocus.com/bid/107385
vdb-entryx_refsource_BID
https://kc.mcafee.com/corporate/index?page=content&id=SB10277
x_refsource_CONFIRM

Link	Providers	Tags
http://www.securityfocus.com/bid/107385		vdb-entryx_refsource_BID
https://kc.mcafee.com/corporate/index?page=content&id=SB10277		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Mar 12, 2019

Updated Aug 4, 2024

Reserved Jan 3, 2019

Link CVE-2019-3615

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2019-3615

Severity n/a

Public date n/a

Links CVE-2019-3615