CVEvulnerability

CVE-2018-6689

7.8 HIGH Published 2018-10-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
7.0 HIGH — CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-287

Description

Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions.

Affected configurations

• mcafee data loss prevention endpoint (>= 10.0.0 < 10.0.510) • mcafee data loss prevention endpoint (>= 11.0.0 < 11.0.600)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References