Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DLP ePO extension - Privilege escalation
Vulnerability Description
Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Vulnerability Type
特权管理不恰当
Vulnerability Title
McAfee Data Loss Prevention ePO extension 安全漏洞
Vulnerability Description
McAfee Data Loss Prevention（DLP）是美国迈克菲（McAfee）公司的一套数据丢失防护套件，它包含McAfee DLP Monitor、McAfee DLP Endpoint等组件，并提供事件管理和报告、同步本地和云DLP策略等功能。ePO extension是使用在其中的一个集中式安全管理扩展程序。 McAfee DLP ePO extension 11.5.3之前版本中存在安全漏洞。远程攻击者可利用该漏洞获取提升的权限。
CVSS Information
N/A
Vulnerability Type
N/A