PT-2018-17712 · Mcafee · Mcafee Data Loss Prevention (Dlp) For Windows

Published 2018-07-23 · Updated 2023-03-04 · CVE-2018-6683

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 McAfee Data Loss Prevention (DLP) for Windows versions prior to 11.0.405

Description The issue allows local users to bypass DLP policy via editing of local policy files when offline, due to incorrectly configured access control security levels.

Recommendations For versions prior to 10.0.505, update to version 10.0.505 or later to resolve the issue. For versions prior to 11.0.405, update to version 11.0.405 or later to resolve the issue.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2018-6683

Affected Products

Mcafee Data Loss Prevention (Dlp) For Windows

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-6683 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6683 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10246 · Note