Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2019-3622

DLP Endpoint log file redirection to arbitrary locations

Description

Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create symbolic links.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee, LLC Data Loss Prevention (DLPe) for Windows

  • 11.x to < 11.3.0affected

References