6.8
CVE-2019-3621
- EPSS 0.06%
- Veröffentlicht 25.07.2019 17:15:14
- Zuletzt bearbeitet 21.11.2024 04:42:15
- Quelle trellixpsirt@trellix.com
- Teams Watchlist Login
- Unerledigt Login
Authentication protection bypass vulnerability in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows physical local user to bypass the Windows lock screen via DLPe processes being killed just prior to the screen being locked or when the screen is locked. The attacker requires physical access to the machine.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mcafee ≫ Data Loss Prevention Endpoint Version >= 11.0 < 11.1.200
Mcafee ≫ Data Loss Prevention Endpoint Version >= 11.2.000 < 11.3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.193 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.2 | 0.3 | 5.9 |
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
| trellixpsirt@trellix.com | 6.8 | 0.2 | 6 |
CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
|