CVE-2018-6683: - Data Loss Prevention (DLP) for Windows - Exploiting Incorrectly Configured Access Control Security Levels vulnerability
Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-6683.
What is the title of this vulnerability?
The title of this vulnerability is 'Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.'
What is the severity of CVE-2018-6683?
The severity of CVE-2018-6683 is high with a base score of 7.4.
What software versions are affected by this vulnerability?
McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 are affected by this vulnerability.
How can local users bypass DLP policy via editing of local policy files when offline?
Local users can bypass DLP policy via editing of local policy files when offline in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 due to incorrectly configured access control security levels.