CVE-2018-6664

CWE-3473 documents3 sources

Severity

8.8HIGH

EPSS

0.3%

top 49.82%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mcafee Data Loss Prevention (dlp) Endpoint Mcafee Data Loss Prevention Endpoint

Timeline

PublishedMay 25

Latest updateMay 13

Description

Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.

CVSS vector

CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:HExploitability: 0.3 | Impact: 5.5

Affected Packages2 packages

▶NVDmcafee/data_loss_prevention_endpoint< 10.0.500+1

▶CVEListV5mcafee/data_loss_prevention_(dlp)_endpoint10 — 10.0.500+1

🔴Vulnerability Details

GHSA

GHSA-9h7x-wv5p-55q4: Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10↗2022-05-13

▶

CVEList

SB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability↗2018-05-25

▶