CVE-2018-6689

HIGH

McAfee Data Loss Prevention Endpoint 10.0.0-10.0.509 and 11.0.0-11.0.599 - Authentication Bypass

Title source: llm

Description

Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://kc.mcafee.com/corporate/index?page=content&id=SB10252

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1041908

Scores

CVSS v3 7.8

EPSS 0.0006

EPSS Percentile 18.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-287

Status published

Products (1)

mcafee/data_loss_prevention_endpoint 10.0.0 - 10.0.510

Published Oct 03, 2018

Tracked Since Feb 18, 2026