What is CVE-2018-6683?

CVE-2018-6683 is a high-severity vulnerability in Mcafee Data Loss Prevention (Dlp) For Windows, classified under Incorrect Default Permissions. CVSS score: 7.4/10. Published 2018-07-23.

How severe is CVE-2018-6683?

High severity. CVSS v3 base score is 7.4 out of 10.

Vulnerability in Mcafee Data Loss Prevention (Dlp) For Windows

CVE-2018-6683

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy fil…

EPSS: 0.003 (21.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Mcafee Data Loss Prevention (Dlp) For Windows — versions 10.x, 11.x
Mcafee Data_loss_prevention_endpoint
Microsoft Windows

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2018-6683?: CVE-2018-6683 is a high-severity vulnerability in Mcafee Data Loss Prevention (Dlp) For Windows, classified under Incorrect Default Permissions. CVSS score: 7.4/10. Published 2018-07-23.
How severe is CVE-2018-6683?: High severity. CVSS v3 base score is 7.4 out of 10.