True Key Browser Extension 3.1.9219.0 update fixes Sensitive Data Exposure vulnerability
CVE-2019-3610

5.6MEDIUM

Key Information:

Vendor

Mcafee, Llc

Status
True Key (tk)
Vendor
CVE Published:
13 February 2019

What is CVE-2019-3610?

Data Leakage Attacks vulnerability in Microsoft Windows client in McAfee True Key (TK) 3.1.9211.0 and earlier allows local users to expose confidential data via specially crafted malware.

Affected Version(s)

True Key (TK) Chrome, Edge and Firefox 3.1 <= 3.1.9211.0

References

http://www.securityfocus.com/bid/107217
vdb-entryx_refsource_BID
https://service.mcafee.com/webcenter/portal/cp/home/artic...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.