CVE-2019-3621: DLP Endpoint Windows lock screen bypass with physical access
Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-3621?
CVE-2019-3621 is an authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0.
How does CVE-2019-3621 work?
CVE-2019-3621 allows a physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked.
Which versions of McAfee Data Loss Prevention Endpoint are affected?
McAfee Data Loss Prevention Endpoint 11.0 to 11.1.200 and 11.2.000 to 11.3.0 are affected.
What is the severity of CVE-2019-3621?
CVE-2019-3621 has a severity score of 6.2 (Medium).
How can I fix CVE-2019-3621?
To fix CVE-2019-3621, update McAfee Data Loss Prevention (DLPe) for Windows to version 11.3.0 or newer.