CVEvulnerability

CVE-2018-6664

8.8 HIGH Published 2018-05-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.8 MEDIUM — CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:H
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-347

Description

Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.

Affected configurations

• mcafee data loss prevention endpoint (< 10.0.500) • mcafee data loss prevention endpoint (< 11.0.400)

Related

Weakness · CWE (1)

  • CWE-347 Improper Verification of Cryptographic Signature weakness

References