CVE-2019-3621: DLP Endpoint Windows lock screen bypass with physical access
First published: Thu Jul 25 2019(Updated: )
Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.
Credit: psirt@mcafee.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Data Loss Prevention Endpoint | >=11.0<11.1.200 | |
| Mcafee Data Loss Prevention Endpoint | >=11.2.000<11.3.0 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-3621?
CVE-2019-3621 is an authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0.
How does CVE-2019-3621 work?
CVE-2019-3621 allows a physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked.
Which versions of McAfee Data Loss Prevention Endpoint are affected?
McAfee Data Loss Prevention Endpoint 11.0 to 11.1.200 and 11.2.000 to 11.3.0 are affected.
What is the severity of CVE-2019-3621?
CVE-2019-3621 has a severity score of 6.2 (Medium).
How can I fix CVE-2019-3621?
To fix CVE-2019-3621, update McAfee Data Loss Prevention (DLPe) for Windows to version 11.3.0 or newer.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/title
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/mcafee
- canonical/mcafee data loss prevention endpoint
- version/mcafee data loss prevention endpoint/11.0
- version/mcafee data loss prevention endpoint/11.2.000
- vendor/microsoft
- canonical/microsoft windows