CVE-2018-6683: Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and…

PriorityP432high7.4CVSS 3.1

AVPACLPRLUINSCCHIHAH

EPSS

0.30%

21.9th percentile

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
mcafee	data_loss_prevention_endpoint	< 10.0.505	10.0.505
mcafee	data_loss_prevention_endpoint	< 11.0.405	11.0.405
mcafee	data_loss_prevention_for_windows	>= 10.x < 10.0.505	10.0.505
mcafee	data_loss_prevention_for_windows	>= 11.x < 11.0.405	11.0.405

CVSS provenance

nvdv3.17.4HIGHCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

nvdv3.07.2HIGHCVSS:3.0/AV:P/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.