[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7XxyiWMP2yI08_WkHBsB0J__PnRzc2lJwfZhLQP5u9A":3,"g5a-risk:CVE-2019-3586":121},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":59,"references":60,"referencesCount":59,"weaknesses":69,"weaknessesCount":78,"isActivelyExploited":79,"cisaInfo":27,"otxData":27,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":117,"notableEvents":118},"CVE-2019-3586","What is CVE-2019-3586?","Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to circumvent ENS protection where GTI flagged IP addresses are not blocked by the ENS Firewall via specially crafted malicious sites where the GTI reputation is carefully manipulated and does not correctly trigger the ENS Firewall to block the connection.","Protection Mechanism Failure in the Firewall in McAfee Endpoint Security (ENS) 10.x prior to 10.6.1 May 2019 update allows context-dependent attackers to cir...","2019-05-15T16:29:00.55","2023-11-07T03:09:55.513",7.5,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":22,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","HIGH","NONE","REQUIRED","CHANGED","LOW",null,1.6,5.3,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"01626437-bf8f-4d1c-912a-893b5eb04808","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:H",[38],{"Source":17,"Type":18,"CVSSData":39,"BaseSeverity":44,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":4},{"Version":40,"VectorString":41,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":42,"IntegrityImpact":42,"AvailabilityImpact":42,"BaseScore":43,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:H\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",5.1,"MEDIUM",4.9,6.4,0.00761,[47,47,47,47,47,47,47],"High",[51,56],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"mcafee","endpoint_security","*","cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"10.6.1","cpe:2.3:a:mcafee:endpoint_security:10.6.1:201905:*:*:*:*:*:*",2,[61,65],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108416","Securityfocus",[],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fkc.mcafee.com\u002Fcorporate\u002Findex?page=content&id=SB10280","Mcafee",[],[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar","Simple",1,false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2019-3586? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-3586, a high severity cyber security vulnerability from 2019. Protection Mechanism Failure in the Firewall in McAfee Endpo...","CVE-2019-3586, CVE-2019-3586 vulnerability, CVE-2019-3586 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, mcafee security, endpoint_security vulnerability","\u002Fwhat-is\u002Fcve-2019-3586",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-3586","Cybersecurity","CVE-2019-3586, CVE-2019-3586 vulnerability, CVE-2019-3586 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":27,"Negate":27,"Nodes":108},[109],{"Operator":110,"Negate":27,"CPEMatch":111},"OR",[112,115],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":113,"VersionStartExcluding":27,"VersionStartIncluding":114,"VersionEndExcluding":27,"VersionEndIncluding":57},"A079D9DB-D2B6-47D2-956B-D488D5CF2B86","10.0.0",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"74D3A76C-3A30-41A5-A065-AF8904EC81B4",[],[],{"lastModified":11,"cacheTime":120,"version":40},1792353183694,{"score":122,"band":123,"action":124,"scoredAt":125},46,"Medium","Plan remediation","2026-10-16T06:46:08.439162+00:00"]