CVE-2018-6683

—

CVSS 3.1

7.4 high

EPSS

<1%p23

Published

Jul 23, 2018 (Jul 23, 2018)

Modified

Jun 17, 2026

Description

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention (DLP) for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline.

Vendors: mcafee
Products: data loss prevention endpoint
Weakness: CWE-276
Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.