Vulnerability Details : CVE-2018-6664
Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.
Products affected by CVE-2018-6664
- cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:*:*:*
- cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-6664
0.36%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 69 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-6664
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.5
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:P/A:P |
8.0
|
6.4
|
NIST | |
|
8.8
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST | |
|
5.8
|
MEDIUM | CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:H |
0.3
|
5.5
|
McAfee (DEFUNCT) |
CWE ids for CVE-2018-6664
-
The product does not verify, or incorrectly verifies, the cryptographic signature for data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-6664
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10233
McAfee Security Bulletin - Data Loss Prevention Endpoint update fixes master bypass vulnerability (CVE-2018-6664)Vendor Advisory
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10237
McAfee Security Bulletin - VirusScan Enterprise 8.8 for Windows update fixes McTray privilege elevation vulnerability (CVE-2018-6674)Not Applicable
-
http://www.securitytracker.com/id/1040895
McAfee Data Loss Prevention Endpoint Flaw Lets Local Users Bypass Security Restrictions - SecurityTrackerThird Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/104299
McAfee Data Loss Prevention Endpoint CVE-2018-6664 Local Security Bypass VulnerabilityThird Party Advisory;VDB Entry
Jump to