PT-2019-3998 · Mcafee · Mcafee Data Loss Prevention

Publicado

2019-07-23

·

Atualizado

2020-10-16

·

CVE-2019-3622

CVSS v3.1

8.2

Alta

VetorAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention (DLPe) for Windows versions prior to 11.3.0
Description The issue is related to insufficient access control in McAfee Data Loss Prevention Endpoint, allowing an authenticated user to redirect log files to arbitrary locations by creating symbolic links due to incorrect access control applied to the log folder. This can be exploited by a privileged user.
Recommendations For versions prior to 11.3.0, update to version 11.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the DLPe log folder to prevent privileged users from creating symbolic links until a patch is available.

Correção

Improper Access Control

Files Accessible to External Parties

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284CWE-552

Identificadores relacionados

BDU:2019-04529
CVE-2019-3622

Produtos afetados

Mcafee Data Loss Prevention