CVE-2019-3622CWE-552

DLP Endpoint log file redirection to arbitrary locations

High · published July 24, 2019

CVSS v3.0
7.5
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create symbolic links.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.3th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2019-07-24T16:13Z
EPSS history
Timeline
  • 24 JUL 16:13Z
    DLP Endpoint log file redirection to arbitrary locations
    cvelistv5