What’s Vulnerable › Vulnerabilities

CVE-2019-3622: DLP Endpoint log file redirection to arbitrary locations

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-24 · updated 2026-06-17
• Weakness: CWE-552

Description

Files or Directories Accessible to External Parties in McAfee Data Loss Prevention (DLPe) for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create symbolic links.

Affected products

• McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows: from 11.0 before 11.1.200; from 11.2.000 before 11.3.0 — fixed in 11.1.200, 11.3.0

How to fix

Upgrade to a fixed version: McAfee,LLC McAfee Data Loss Prevention (DLP) Endpoint for Windows 11.1.200, 11.3.0. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/109370
• https://kc.mcafee.com/corporate/index?page=content&id=SB10290
• http://www.securityfocus.com/bid/109370
• https://kc.mcafee.com/corporate/index?page=content&id=SB10290

Get alerted when CVE-2019-3622 or the next vulnerability affects your stack