CVE-2018-6689 - Vulnerability Details - OpenCVE

Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Physical

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Mcafee	Data Loss Prevention Endpoint

Configuration 1 [-]

OR	cpe:2.3:a:mcafee:data_loss_prevention_endpoint::::::::
	cpe:2.3:a:mcafee:data_loss_prevention_endpoint::::::::

No data.

References

Link	Providers
http://www.securitytracker.com/id/1041908
https://kc.mcafee.com/corporate/index?page=content&id=SB10252

History

No history.

MITRE

Status: PUBLISHED

Assigner: trellix

Published: 2018-10-03T12:00:00

Updated: 2024-08-05T06:10:11.222Z

Reserved: 2018-02-06T00:00:00

Link: CVE-2018-6689

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-10-03T12:29:00.300

Modified: 2024-11-21T04:11:06.473

Link: CVE-2018-6689

Redhat

No data.

{"containers": {"cna": {"affected": [{"platforms": ["x86"], "product": "Data Loss Prevention Endpoint (DLPe)", "vendor": "McAfee", "versions": [{"lessThan": "10.0.0*", "status": "affected", "version": "10.0.0", "versionType": "custom"}, {"lessThan": "10.0.510*", "status": "unaffected", "version": "10.0.510", "versionType": "custom"}, {"lessThan": "11.0.0*", "status": "affected", "version": "11.0.0", "versionType": "custom"}, {"lessThan": "11.0.600*", "status": "unaffected", "version": "11.0.600", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "McAfee credits Lockheed Martin Red Team for reporting this flaw."}], "datePublic": "2018-10-02T00:00:00", "descriptions": [{"lang": "en", "value": "Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Authentication Bypass vulnerability\n", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T09:57:01", "orgId": "01626437-bf8f-4d1c-912a-893b5eb04808", "shortName": "trellix"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10252"}, {"name": "1041908", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1041908"}], "source": {"advisory": "SB10252", "discovery": "USER"}, "title": " Data Loss Prevention Endpoint (DLPe) - Authentication Bypass vulnerability", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@mcafee.com", "ID": "CVE-2018-6689", "STATE": "PUBLIC", "TITLE": " Data Loss Prevention Endpoint (DLPe) - Authentication Bypass vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Data Loss Prevention Endpoint (DLPe)", "version": {"version_data": [{"affected": ">=", "platform": "x86", "version_affected": ">=", "version_name": "10.0.0", "version_value": "10.0.0"}, {"affected": "!>=", "platform": "x86", "version_affected": "!>=", "version_name": "10.0.510", "version_value": "10.0.510"}, {"affected": ">=", "platform": "x86", "version_affected": ">=", "version_name": "11.0.0", "version_value": "11.0.0"}, {"affected": "!>=", "platform": "x86", "version_affected": "!>=", "version_name": "11.0.600", "version_value": "11.0.600"}]}}]}, "vendor_name": "McAfee"}]}}, "credit": [{"lang": "eng", "value": "McAfee credits Lockheed Martin Red Team for reporting this flaw."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Authentication Bypass vulnerability\n"}]}]}, "references": {"reference_data": [{"name": "https://kc.mcafee.com/corporate/index?page=content&id=SB10252", "refsource": "CONFIRM", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10252"}, {"name": "1041908", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1041908"}]}, "source": {"advisory": "SB10252", "discovery": "USER"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T06:10:11.222Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10252"}, {"name": "1041908", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1041908"}]}]}, "cveMetadata": {"assignerOrgId": "01626437-bf8f-4d1c-912a-893b5eb04808", "assignerShortName": "trellix", "cveId": "CVE-2018-6689", "datePublished": "2018-10-03T12:00:00", "dateReserved": "2018-02-06T00:00:00", "dateUpdated": "2024-08-05T06:10:11.222Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:*:*:*", "matchCriteriaId": "C6B04F93-0BD7-468C-9FE3-2CD9C8442B72", "versionEndExcluding": "10.0.510", "versionStartIncluding": "10.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:*:*:*", "matchCriteriaId": "EFFA2E22-71F8-400A-ADD8-E88F73709719", "versionEndExcluding": "11.0.600", "versionStartIncluding": "11.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions."}, {"lang": "es", "value": "Vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en McAfee Data Loss Prevention Endpoint (DLPe) en versiones 10.0.x anteriores a la 10.0.510 y versiones 11.0.x anteriores a la 11.0.600 permite que los atacantes omitan la protecci\u00f3n local de seguridad mediante condiciones espec\u00edficas."}], "id": "CVE-2018-6689", "lastModified": "2024-11-21T04:11:06.473", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 0.7, "impactScore": 5.8, "source": "trellixpsirt@trellix.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-10-03T12:29:00.300", "references": [{"source": "trellixpsirt@trellix.com", "url": "http://www.securitytracker.com/id/1041908"}, {"source": "trellixpsirt@trellix.com", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10252"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1041908"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10252"}], "sourceIdentifier": "trellixpsirt@trellix.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}