PT-2018-17714 · Mcafee · Mcafee Data Loss Prevention Endpoint

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention Endpoint DLPe versions 10.0.x through 10.0.509 McAfee Data Loss Prevention Endpoint DLPe versions 11.0.x through 11.0.599 Description: The issue allows attackers to bypass local security protection under specific...

Collaborate securely

This is a blog series that responds to common questions we receive from customers about deployment of Microsoft 365 security solutions. In this series youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out Protecting user identities, the...

McAfee Data Loss Prevention for Windows Offline Policy Bypass Vulnerability

McAfee Data Loss Prevention DLP is a data loss prevention solution from McAfee, Inc. The solution protects intellectual property and ensures compliance by protecting the environment where sensitive data resides - on-premise, in the cloud, or on the endpoint. A security vulnerability in McAfee DLP...

CVE-2018-6683

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention DLP for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline...

CVE-2018-6683

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention DLP for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline...

CVE-2018-6683

Summary: CVE-2018-6683 affects McAfee Data Loss Prevention (DLP) for Windows. The vulnerability stems from an incorrectly configured access control security level that enables a local attacker to bypass DLP policy by editing a local policy file while offline. Affected versions are McAfee DLP for ...

PT-2018-17712 · Mcafee · Mcafee Data Loss Prevention (Dlp) For Windows

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP for Windows versions prior to 10.0.505 McAfee Data Loss Prevention DLP for Windows versions prior to 11.0.405 Description: The issue allows local users to bypass DLP policy via editing of local policy files whe...

McAfee Network Security Manager and Network Data Loss Prevention Session Fixation Vulnerability

McAfee Network Security Manager NSM and Network Data Loss Prevention NDLP are both products from McAfee, Inc. McAfee Network Security Manager NSM is a network security solution that monitors in real time the deployment of McAfee Intrusion Prevention Systems throughout the network. network Data Lo...

Monitoring Data & Data Access to Support Ongoing GDPR Compliance – Part III: Tools

The new European Union EU-wide General Data Protection Regulation GDPR was signed into law in late April 2016, and the compliance deadline came into effect on May 25, 2018. The Regulation is expansive and covers a variety of subject areas, provisions, and actions in the form of documented Article...

CVE-2017-3968

Session fixation vulnerability in the web interface in McAfee Network Security Manager NSM before 8.2.7.42.2 and McAfee Network Data Loss Prevention NDLP before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie...

CVE-2017-3968 McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability

Session fixation vulnerability in the web interface in McAfee Network Security Manager NSM before 8.2.7.42.2 and McAfee Network Data Loss Prevention NDLP before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie...

CVE-2017-3968

CVE-2017-3968 concerns a session fixation vulnerability in the web interface of McAfee Network Security Manager (NSM) and Network Data Loss Prevention (NDLP). The issue allows remote attackers to disclose sensitive information or manipulate the underlying database by exploiting a crafted authenti...

Design/Logic Flaw

Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention DLP Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility...

CVE-2018-6664

CVE-2018-6664 affects McAfee Data Loss Prevention (DLP) Endpoint: the DLP Agent prior to 10.0.500 or 11.x prior to 11.0.400 allows an authenticated user to bypass the product block via a command-line utility. Impact is a master bypass of protection, with no details on exploitation in the wild pro...

CVE-2018-6664 SB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability

Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention DLP Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility...

McAfee Data Loss Prevention Endpoint Local Security Bypass Vulnerability

McAfee Data Loss Prevention DLP Endpoint is an integrated endpoint data protection solution from McAfee. The program can prevent the theft and accidental disclosure of confidential data, and provides security policies for file processing and transmission, shared endpoint data flow control and dat...

Digital Guardian Management Console 7.1.2.0015 XXE Injection

Title: Digital Guardian Managment Console - XML External Entity Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10175 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============ Digital Guardian is an American data los...

Digital Guardian Management Console 7.1.2.0015 XXE Injection Vulnerability

Exploit for asp platform in category web applications Title: Digital Guardian Managment Console - XML External Entity Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10175 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description:...

Digital Guardian Management Console 7.1.2.0015 Server Side Request Forgery Vulnerability

Exploit for asp platform in category web applications Title: Digital Guardian Managment Console - Server Side Request Forgery Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10174 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015...

Digital Guardian Management Console 7.1.2.0015 Server Side Request Forgery

Title: Digital Guardian Managment Console - Server Side Request Forgery Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10174 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description: ============ Digital Guardian is an American...