PT-2021-2460 · Mcafee · Mcafee Data Loss Prevention

Published

2021-03-23

·

Updated

2023-02-11

·

CVE-2020-7346

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention (DLP) for Windows versions prior to 11.6.100
Description The issue is related to a privilege escalation vulnerability that allows a local, low-privileged attacker to load DLLs of their choice by using junctions and sending a specific IOTL command at the correct time. This requires the creation and removal of junctions by the attacker. The vulnerability is associated with insecure privilege management.
Recommendations For versions prior to 11.6.100, update to version 11.6.100 or later to resolve the issue. As a temporary workaround, consider restricting the ability to create and remove junctions to minimize the risk of exploitation. Avoid using the IOTL command in sensitive operations until the issue is resolved.

Fix

Improper Privilege Management

Link Following

Weakness Enumeration

CWE-269CWE-59

Related Identifiers

BDU:2021-01826
CVE-2020-7346

Affected Products

Mcafee Data Loss Prevention