title:  Data Loss Prevention Endpoint (DLPe) - Authentication Bypass vulnerability
description: Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions.
problem types: Authentication Bypass vulnerability
affected:
{
platforms: x86
product: Data Loss Prevention Endpoint (DLPe)
vendor: McAfee
versions:
lessThan: 10.0.0*, status: affected, version: 10.0.0, versionType: custom
lessThan: 10.0.510*, status: unaffected, version: 10.0.510, versionType: custom
lessThan: 11.0.0*, status: affected, version: 11.0.0, versionType: custom
lessThan: 11.0.600*, status: unaffected, version: 11.0.600, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
version: 3.0
]