Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2019-3631

Command Injection could allow authenticated users to execute arbitrary code

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Command Injection vulnerability in McAfee Enterprise Security Manager (ESM) prior to 11.2.0 and prior to 10.4.0 allows authenticated user to execute arbitrary code via specially crafted parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee, LLC McAfee Enterprise Security Manager (ESM)

  • 11.x to < 11.2.0affected
  • 10.x to < 10.4.0affected

References