CVEvulnerability

CVE-2018-6683

7.4 HIGH Published 2018-07-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.0 ([email protected])
7.2 HIGH — CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-276

Description

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.

Affected configurations

• mcafee data loss prevention endpoint (< 10.0.505) • mcafee data loss prevention endpoint (< 11.0.405)

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References