What is CVE-2019-3622?

CVE-2019-3622 is a high-severity vulnerability in Mcafee Data Loss Prevention Endpoint, classified under Files or Directories Accessible to External Parties. CVSS score: 8.2/10. Published 2019-07-24.

How severe is CVE-2019-3622?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in Mcafee Data Loss Prevention Endpoint

CVE-2019-3622

Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create symbolic links.

EPSS: 0.003 (24.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Mcafee Data_loss_prevention_endpoint
Mcafee, Llc Data Loss Prevention (Dlpe) For Windows — versions 11.x
Microsoft Windows

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)
trellixpsirt@trellix.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-3622?: CVE-2019-3622 is a high-severity vulnerability in Mcafee Data Loss Prevention Endpoint, classified under Files or Directories Accessible to External Parties. CVSS score: 8.2/10. Published 2019-07-24.
How severe is CVE-2019-3622?: High severity. CVSS v3 base score is 8.2 out of 10.