CVE-2020-7300: DLP ePO extension - Improper Authorization
Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-7300?
CVE-2020-7300 is an Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3.
How does CVE-2020-7300 affect McAfee Data Loss Prevention?
CVE-2020-7300 allows authenticated remote attackers to change the configuration of McAfee Data Loss Prevention when logged in with view only privileges.
Who is affected by CVE-2020-7300?
McAfee Data Loss Prevention versions prior to 11.5.3 are affected by CVE-2020-7300.
What is the severity of CVE-2020-7300?
CVE-2020-7300 has a severity score of 6.3 (Medium).
How can I fix CVE-2020-7300?
To fix CVE-2020-7300, update McAfee Data Loss Prevention to version 11.5.3 or later.