Dopple-Ganging Up on Facial Recognition

ARCHIVED STORY Dopple-ganging up on Facial Recognition Systems By Steve Povolny · August 25, 2020 Co-authored with Jesse Chick, OSU Senior and Former McAfee Intern, Primary Researcher. Special thanks to Dr. Catherine Huang, McAfee Advanced Analytics Team Special thanks to Kyle Baldes, Former McAf...

CVE-2020-7310

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...

CVE-2020-7310

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...

Privilege escalation

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...

CVE-2020-7310 Privilege Escalation vulnerability in McAfee Total Protection (MTP) trial installer

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...

CVE-2020-7310

CVE-2020-7310 describes a privilege-escalation flaw in the installer of McAfee Total Protection (MTP) trial before version 4.0.161.1. The issue arises from manipulating symbolic links to redirect McAfee file operations to an unintended file, enabling local users to modify files governed by write-...

McAfee Data Loss Prevention Endpoint Agent Detection (macOS)

Binary data macosxmcafeedlpeagentinstalled.nbin...

McAfee DLP Extension for ePO Installed (Windows)

Binary data mcafeedlpepoextensioninstalled.nbin...

McAfee MacOSX DLPe Agent 11.3.x < 11.3.31 / 11.4.x < 11.4.200 / 11.5.x < 11.5.2 Multiple Vulnerabilities (SB10326)

The version of the McAfee Data Loss Prevention Endpoint DLPe Agent installed on the remote MacOSX host is 11.3.x prior to 11.3.31, 11.4.x prior to 11.4.200, or 11.5.x prior to 11.5.2. It is, therefore, affected by multiple vulnerabilities: - Unprotected Storage of Credentials vulnerability in...

McAfee Data Loss Prevention ePO extension Multiple Vulnerabilities (SB10326)

The remote host is running a version of McAfee ePolicy Orchestrator that is affected by multiple vulnerabilities, including the following: - Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to upload...

McAfee Data Loss Prevention Endpoint for Mac Credential Protection Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transmission, shared endpoint data flow control and data...

Unspecified Vulnerability in McAfee Data Loss Prevention

McAfee Data Loss Prevention DLP is a data loss prevention suite from McAfee, Inc. that includes components such as McAfee DLP Monitor, McAfee DLP Endpoint, and other features such as event management and reporting, and synchronization of local and cloud DLP policies. A security vulnerability exis...

McAfee Data Loss Prevention ePO extension cross-site scripting vulnerability (CNVD-2020-48598)

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee, Inc. that prevents theft and accidental disclosure of confidential data and provides security policies for file processing and transmission, shared data flow control and data encryption. The...

McAfee Data Loss Prevention ePO extension Cross-Site Request Forgery Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee, Inc. that prevents theft and accidental disclosure of confidential data and provides security policies for file processing and transmission, shared data flow control and data encryption. The...

McAfee Data Loss Prevention ePO extension code issue vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee, Inc. that prevents theft and accidental disclosure of confidential data and provides security policies for file processing and transmission, shared data flow control and data encryption. The...

‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product

ARCHIVED STORY ‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product By Douglas McKee · August 18, 2020 Eoin Carroll, Charles McFarland, Kevin McGrath, and Mark Bereza contributed to this report. The Internet of Things promises to make our lives easier. Want to remotely turn...

McAfee Data Loss Prevention ePO extension incorrect authorization vulnerability

McAfee Data Loss Prevention DLP ePO extension is a data security protection software. An incorrect authorization vulnerability exists in the McAfee Data Loss Prevention DLP ePO extension. Allows remote attackers can exploit the vulnerability to submit a special request that can change the...

CVE-2020-7307

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention DLP for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials...

CVE-2020-7307

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention DLP for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials...

CVE-2020-7307

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention DLP for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials...