Skip to content
OpenAdvisories
Medium · 6.7 CVE-2020-7305 EUVD-2020-28432GHSA-7m49-jjgq-fmqf

DLP ePO extension - Privilege escalation

Published Aug 13, 2020 · Updated Aug 4, 2024 · Assigned by trellix

Description

Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.

Affected products

VendorProductAffectedFixed
McAfee DLP ePO extension 11.3 – < 11.3.28, 11.4 – < 11.4.200, 11.5 – < 11.5.3 11.3.28

References