CVE-2018-6683
High
Description
Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.
SeverityHigh
CVSS7.4
Exploit probability—
ProductMcafee Data Loss Prevention Endpoint
PublishedJul 23, 2018
First seenJul 23, 2018
How to fix
Update
- mcafee data_loss_prevention_endpoint10.0.505, 11.0.405 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee data_loss_prevention_endpoint | v < 10.0.505, v < 11.0.405 | 10.0.505, 11.0.405 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.