CVE-2020-7300

MEDIUM

McAfee Data Loss Prevention < 11.3.28 - Authenticated Configuration Change via HTTP Post Messages

Title source: llm
STIX 2.1

Description

Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages.

References (1)

Core 1
Core References

Scores

CVSS v3 4.6
EPSS 0.0012
EPSS Percentile 31.0%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Details

CWE
CWE-863
Status published
Products (1)
mcafee/data_loss_prevention 11.3.0 - 11.3.28
Published Aug 12, 2020
Tracked Since Feb 18, 2026