Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-7300

Improper Authorization vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages.

  • Published: Aug 13, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-7300
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:N/I:P/A:N

CWEs:

Software From Fixed in
mcafee / data_loss_prevention 11.3.0 11.3.28
mcafee / data_loss_prevention 11.4.0 11.4.200
mcafee / data_loss_prevention 11.5.0 11.5.3