PT-2023-16242

Name of the Vulnerable Software and Affected Versions DLP for Windows versions 11.9.x Description The issue allows a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. It is noted that loading from a local driver was correctly prevented...

CVE-2023-0400: Always-Incorrect Control Flow Implementation

The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading sensitive data from a mapped drive into a web email client. Loading from a local driver was correctly prevented. Versions prior to 11.9...

CVE-2020-7346: Improper Link Resolution Before File Access

Privilege Escalation vulnerability in McAfee Data Loss Prevention DLP for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to load DLLs of the attacker's choosing. This requires the creation and removal of junctions by the attack...

CVE-2018-6683: Incorrect Default Permissions

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention DLP for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline...