CVE-2020-7300

Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages.

Score

CVSS 3.1 6.3 Medium

Status

Modified - trellixpsirt@trellix.com

Published

2020-08-12

Last modified

2024-08-04

Weaknesses

CWE-863

Affected products

• Data Loss Prevention (Mcafee)
• Dlp Epo Extension (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10326