CVE-2019-3619

Severity: medium (CVSS 4.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-03 · updated 2026-06-17
Weakness: CWE-319

Description

Information Disclosure vulnerability in the Agent Handler in McAfee ePolicy Orchestrator (ePO) 5.9.x and 5.10.0 prior to 5.10.0 update 4 allows remote unauthenticated attacker to view sensitive information in plain text via sniffing the traffic between the Agent Handler and the SQL server.

Affected products

McAfee,LLC McAfee ePolicy Orchestrator (ePO): 5.9.0, 5.9.1, 5.10.0, 5.10.0-update_1, 5.10.0-update_2, 5.10.0-update_3

References

http://www.securityfocus.com/bid/109066
https://kc.mcafee.com/corporate/index?page=content&id=SB10286
http://www.securityfocus.com/bid/109066
https://kc.mcafee.com/corporate/index?page=content&id=SB10286

Get alerted when CVE-2019-3619 or the next vulnerability affects your stack