title: SB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability
description: Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility.
problem types: Application Protection Bypass vulnerability
affected:
{
platforms: x86
product:  Data Loss Prevention (DLP) Endpoint
vendor: McAfee
versions:
lessThan: 10.0.500, status: affected, version: 10, versionType: custom
}
{
product:  Data Loss Prevention (DLP) Endpoint
vendor: McAfee
versions:
lessThan: 11.0.400, status: affected, version: 11, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 5.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:H
version: 3.0
]