CVE-2020-7307: Insufficiently Protected Credentials

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention DLP for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials...

CVE-2020-7304: Cross-Site Request Forgery (CSRF)

Cross site request forgery vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attacker to embed a CRSF script via adding a new label...

CVE-2020-7302: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking...

PT-2020-19540

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP ePO extension versions prior to 11.5.3 Description A privilege escalation issue exists due to incorrect validation of user credentials, allowing a low-privileged remote attacker to create new rule sets...

CVE-2020-7301

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

CVE-2020-7300

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

Cross site scripting

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

Authorization

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

CVE-2020-7300

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

CVE-2020-7301 DLP ePO extension - Cross site scripting

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

CVE-2020-7301

CVE-2020-7301 concerns the McAfee Data Loss Prevention (DLP) ePO extension prior to version 11.5.3. The vulnerability is a Cross Site Scripting (XSS) flaw within the DLP case management file-upload tab, exploited by authenticated users to trigger alerts. The provided documents confirm the affecte...

CVE-2020-7300

CVE-2020-7300 affects McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3. An improper authorization flaw lets authenticated users with view-only privileges remotely alter configuration via carefully crafted HTTP POST messages. Impact is limited to configuration changes; exploitation ...

PT-2020-5830

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention ePO extension versions prior to 11.5.3 Description: The issue is related to an unrestricted upload of files with dangerous types in the ePolicy Orchestrator extension of McAfee Data Loss Prevention. This could allo...

PT-2020-19536

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP ePO extension versions prior to 11.5.3 Description The issue allows authenticated remote attackers to change the configuration when logged in with view-only privileges via carefully constructed HTTP post message...

PT-2020-19537

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention DLP ePO extension versions prior to 11.5.3 Description A Cross Site scripting issue allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section. Recommendations For...

PT-2020-5831

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLP for Mac versions prior to 11.5.2 Description: The issue concerns the storage of credentials in an unprotected manner, allowing local users to access sensitive information, specifically the ADRMS username and...

CVE-2020-7301: Improper Neutralization of Input During Web Page Generation

Cross Site scripting vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to trigger alerts via the file upload tab in the DLP case management section...

CVE-2020-7300: Incorrect Authorization

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

Preventing data loss and mitigating risk in today’s remote work environment

The shift to remote work over the past few months has increased the need for organizations to re-evaluate their security and risk management practices. With employees accessing corporate data at times on home computers or sharing and collaborating in new ways, organizations could be at greater ri...

How to Safeguard Data When the Majority of Your Workforce is Remote

Before our current situation, you and your teams may have implemented a comprehensive data protection plan. The scope of change businesses are currently facing is something none of us could have predicted. These changes will continue to impact how we work in the future. How can you be sure your...