Privilege escalation in McAfee DLP Endpoint for Windows

Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to load DLLs of the attacker's choosing. This requires the creation and removal of junctions by the attacker along with sending a specific IOTL command at the correct time.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

在文件访问前对链接解析不恰当(链接跟随)

Mcafee McAfee Data Loss Prevention 后置链接漏洞

Mcafee McAfee Data Loss Prevention（DLP）是美国迈克菲（Mcafee）公司的一套数据丢失防护套件，它包含McAfee DLP Monitor、McAfee DLP Endpoint等组件，并提供事件管理和报告、同步本地和云DLP策略等功能。 McAfee Data Loss Prevention for Windows prior to 11.6.100 存在安全漏洞，该漏洞允许本地、低特权的攻击者可利用该漏洞通过使用连接使产品加载dll。

N/A

N/A