CVE-2019-3621
DLP Endpoint Windows lock screen bypass with physical access
- State
- Published
- Severity
- 6.8 Medium
- Published
- Jul 25, 2019
- Updated
- Aug 4, 2024
- Reserved
- Jan 3, 2019
Description
Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 6.8 Medium | CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H | trellix |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Data Loss Prevention (DLPe) for WindowsMcAfee, LLC |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.