CVE-2020-7307: Insufficiently Protected Credentials

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention DLP for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials...

CVE-2020-7305: Improper Privilege Management

Privilege escalation vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials...

PT-2020-19538

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP ePO extension versions prior to 11.5.3 Description A Cross Site scripting issue allows an authenticated remote user to trigger scripts to run in a user's browser by adding a new label. Recommendations For versio...

PT-2020-19539

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP ePO extension versions prior to 11.5.3 Description A cross-site request forgery issue allows an authenticated remote attacker to embed a CSRF script by adding a new label. Recommendations For versions prior to...

PT-2020-19540

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP ePO extension versions prior to 11.5.3 Description A privilege escalation issue exists due to incorrect validation of user credentials, allowing a low-privileged remote attacker to create new rule sets...

PT-2020-19541

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP for Mac versions prior to 11.5.2 Description The issue allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials. This is due to an...

CVE-2020-7301

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

CVE-2020-7300

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

Authorization

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

Cross site scripting

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

CVE-2020-7300

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

CVE-2020-7301

CVE-2020-7301 concerns the McAfee Data Loss Prevention (DLP) ePO extension prior to version 11.5.3. The vulnerability is a Cross Site Scripting (XSS) flaw within the DLP case management file-upload tab, exploited by authenticated users to trigger alerts. The provided documents confirm the affecte...

CVE-2020-7301 DLP ePO extension - Cross site scripting

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

CVE-2020-7300

CVE-2020-7300 affects McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3. An improper authorization flaw lets authenticated users with view-only privileges remotely alter configuration via carefully crafted HTTP POST messages. Impact is limited to configuration changes; exploitation ...

CVE-2020-7301: Improper Neutralization of Input During Web Page Generation

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

PT-2020-19536

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP ePO extension versions prior to 11.5.3 Description The issue allows authenticated remote attackers to change the configuration when logged in with view-only privileges via carefully constructed HTTP post message...

PT-2020-19537

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP ePO extension versions prior to 11.5.3 Description A Cross Site scripting issue allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section. Recommendations For...

PT-2020-5830

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention ePO extension versions prior to 11.5.3 Description: The issue is related to an unrestricted upload of files with dangerous types in the ePolicy Orchestrator extension of McAfee Data Loss Prevention. This could allo...

PT-2020-5831

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP for Mac versions prior to 11.5.2 Description: The issue concerns the storage of credentials in an unprotected manner, allowing local users to access sensitive information, specifically the ADRMS username and...

CVE-2020-7300: Incorrect Authorization

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...