EIP-2026-117444

The exploit demonstrates an information disclosure vulnerability in McAfee Data Loss Prevention by crafting specific URLs to download arbitrary files (e.g., /etc/shadow, /etc/syslog.conf) without authentication. The vulnerability lies in the ReDownloadLogs.do endpoint, which fails to validate the filepath and filename parameters.