A vulnerability was found in McAfee Data Loss Prevention up to 10.0/11.0 on Windows (Data Loss Prevention Software) and classified as critical. This issue affects an unknown code block of the component Access Control. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.

The bug was discovered 07/24/2018. The weakness was shared 07/23/2018 (Website). It is possible to read the advisory at kc.mcafee.com. The identification of this vulnerability is CVE-2018-6683 since 02/05/2018. Attacking locally is a requirement. The requirement for exploitation is a simple authentication. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

Upgrading to version 10.0.505 or 11.0.405 eliminates this vulnerability.

The entries VDB-161347, VDB-161855, VDB-162072 and VDB-162075 are related to this item.

Productinfo

Type

• Data Loss Prevention Software

Vendor

• McAfee

Name

• Data Loss Prevention

Version

• 10.0
• 11.0

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion