CVE-2019-3654medium

CVE-2019-3654: medium-severity vulnerability in McAfee Client Proxy (MCP)

Client Proxy (MCP) - Authentication Bypass vulnerability

Published · Updated

Follow this CVE+ Monitor Client Proxy

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.7%
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be generated by the network administrator.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
Affected products
McAfee · Client Proxy (MCP)