title: Improper cleanup vulnerability in FireEye Endpoint Security
description: Improper cleanup vulnerability in exceptions thrown in FireEye Endpoint Security, affecting version 5.2.0.958244. This vulnerability could allow an attacker to send multiple request packets to the containment_notify/preview parameter, which could lead to a service outage.
problem types: CWE-460: Improper Cleanup on Thrown Exception
affected:
{
defaultStatus: unaffected
product: FireEye Endpoint Security
vendor: FireEye
versions:
status: affected, version: 5.2.0.958244
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: The FireEye team is working on fixing the reported vulnerabilities. It is recommended to update affected products to the latest version available.