What’s Vulnerable › Vulnerabilities

CVE-2018-6689: Data Loss Prevention Endpoint (DLPe) - Authentication Bypass vulnerability

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-03 · updated 2026-06-17
• Weakness: CWE-287

Description

Authentication Bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLPe) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions.

Affected products

• McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows: from 10.0.0 before 10.0.510; from 11.0.0 before 11.0.600 — fixed in 10.0.510, 11.0.600

How to fix

Upgrade to a fixed version: McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows 10.0.510, 11.0.600. Check the vendor advisory for mitigations.

References

• http://www.securitytracker.com/id/1041908
• https://kc.mcafee.com/corporate/index?page=content&id=SB10252
• http://www.securitytracker.com/id/1041908
• https://kc.mcafee.com/corporate/index?page=content&id=SB10252

Get alerted when CVE-2018-6689 or the next vulnerability affects your stack