CVE-2019-3654

HIGH 8.6CVE-2019-3654 · Published 22/11/2019 · updated 17/06/2026

In short

CVE-2019-3654 is a HIGH (CVSS 8.6) vulnerability affecting client proxy (mcafee).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.9% of all vulnerabilities.
Fix: update to 3.0.0 or later.

Package	Affected versions	Patched versions
client proxy mcafee	`< 3.0.0`	`3.0.0`

Description

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be generated by the network administrator.

References

kc.mcafee.com/corporate/index

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free