CVE-2019-3621

DLP Endpoint Windows lock screen bypass with physical access

Medium · published July 25, 2019

CVSS v3.0
6.8
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.

The record
Technical detail
CVSS v3.0
6.8 · MEDIUM
Vector
CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00349 · 27.3th percentile
Published
2019-07-25T16:20Z
EPSS history
Timeline
  • 25 JUL 16:20Z
    DLP Endpoint Windows lock screen bypass with physical access
    cvelistv5