CVE Vulnerabilities

CVE-2019-3621

Published: Jul 25, 2019 | Modified: Nov 21, 2024
CVSS 3.x
6.2
MEDIUM
Source:
NVD
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.

Affected Software

NameVendorStart VersionEnd Version
Data_loss_prevention_endpointMcafee11.0 (including)11.1.200 (excluding)
Data_loss_prevention_endpointMcafee11.2.000 (including)11.3.0 (excluding)

References