CVE-2018-6683

HIGH

7.4

Descricao

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.

Detalhes CVE

Pontuacao CVSS v3.17.4

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Vetor de ataquePHYSICAL

ComplexidadeLOW

Privilegios necessariosLOW

Interacao do usuarioNONE

Publicado7/23/2018

Ultima modificacao11/21/2024

Fontenvd

Avistamentos honeypot0

Produtos afetados

mcafee:data_loss_prevention_endpointmicrosoft:windows

Fraquezas (CWE)

CWE-276

Referencias

https://kc.mcafee.com/corporate/index?page=content&id=SB10246(trellixpsirt@trellix.com)

https://kc.mcafee.com/corporate/index?page=content&id=SB10246(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.