DLP for Mac - Unprotected Storage of Credentials

CVE-2020-7307

5.2MEDIUM

Key Information

Vendor
Mcafee
Status
Data Loss Prevention(dlp)
Vendor
CVE Published:
13 August 2020

Summary

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.

Affected Version(s)

Data Loss Prevention(DLP) < 11.3.31

Data Loss Prevention(DLP) < 11.4.200

Data Loss Prevention(DLP) < 11.5.2

References

https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_MISC

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.