CVE-2018-6683— - Data Loss Prevention (DLP) for Windows - Exploiting Incorrectly Configured Access Control Security Levels vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-6683
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
- Data Loss Prevention (DLP) for Windows - Exploiting Incorrectly Configured Access Control Security Levels vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
McAfee Data Loss Prevention for Windows 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
McAfee Data Loss Prevention（DLP）是美国迈克菲（McAfee）公司的一套数据丢失防护解决方案。该解决方案可通过保护敏感数据所在的环境（内部部署、云中或终端上）来保护知识产权并确保合规性。 基于Windows平台的McAfee DLP 10.0.505之前版本和11.0.405之前版本中存在安全漏洞，该漏洞源于程序没有正确的配置访问控制的级别。本地攻击者可通过在离线状况下编辑本地策略文件利用该漏洞绕过DLP策略。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| McAfee | Data Loss Prevention (DLP) for Windows | 10.x ~ 10.0.505 | - |
II. Public POCs for CVE-2018-6683
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-6683
请登录查看更多情报信息。
- https://kc.mcafee.com/corporate/index?page=content&id=SB10246x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2018-6683
Same Patch Batch · McAfee · 2018-07-23 · 3 CVEs total
| CVE-2018-6677 | McAfee Web Gateway (MWG) - Directory Traversal vulnerability | |
| CVE-2018-6678 | McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability |
IV. Related Vulnerabilities
Same vendor: McAfee
- CVE-2022-0280
McAfee Total Protection (MTP) - File Deletion vulnerability - CVE-2022-0815
McAfee WebAdvisor - Extension Fingerprinting vulnerability - CVE-2021-31848
Data Loss Prevention (DLP) ePO extension - Cross site script - CVE-2021-31849
Data Loss Prevention (DLP) ePO extension - SQL injection - CVE-2021-23877
McAfee Total Protection (MTP) - Privilege Escalation vulnera
V. Comments for CVE-2018-6683
No comments yet