Lucene search

[email protected]NVD:CVE-2020-7300

HistoryAug 12, 2020 - 10:15 p.m.

CVE-2020-7300

2020-08-1222:15:12

CWE-863

[email protected]

web.nvd.nist.gov

vulnerability

mcafee dlp

configuration change

http post

authentication

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

43.6%

JSON

Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages.

Affected configurations

Nvd

Node

mcafeedata_loss_preventionRange11.3.0–11.3.28

mcafeedata_loss_preventionRange11.4.0–11.4.200

mcafeedata_loss_preventionRange11.5.0–11.5.3

VendorProductVersionCPE
mcafeedata_loss_prevention*cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	data_loss_prevention	*	cpe:2.3:a:mcafee:data_loss_prevention::::::::

References

kc.mcafee.com/corporate/index?page=content&id=SB10326

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

6.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

43.6%

JSON

Related for NVD:CVE-2020-7300

cvelist1 cve1 prion1 nessus1