CVE-2019-3654

8.6 highEPSS 0.7%

High (8.6) in mcafee client proxy. EPSS 0.7% chance of exploitation in the next 30 days.

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be generated by the network administrator.

Severity

CVSS 3.1

8.6 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2019-11-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:client_proxy

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10305
https://kc.mcafee.com/corporate/index?page=content&id=SB10305

Check your stack JSON