CVE-2018-6683

- Data Loss Prevention (DLP) for Windows - Exploiting Incorrectly Configured Access Control Security Levels vulnerability

State: Published
Severity: 7.2 High
Published: Jul 23, 2018
Updated: Aug 5, 2024
Reserved: Feb 6, 2018

Read the record on cve.org

Description

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.

Scores

CVSS	Score	Vector	Source
3.0	7.2 High	CVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H	trellix

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Data Loss Prevention (DLP) for WindowsMcAfee	10.x to before 10.0.505Affected 11.x to before 11.0.405Affected

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10246

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.