DLP for Mac - Unprotected Storage of Credentials
CVE-2020-7307

5.2MEDIUM

Key Information:

Vendor

Mcafee
Status
Data Loss Prevention(dlp)
Vendor
CVE Published:
13 August 2020

What is CVE-2020-7307?

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.

Affected Version(s)

Data Loss Prevention(DLP) 11.3 < 11.3.31

Data Loss Prevention(DLP) 11.4 < 11.4.200

Data Loss Prevention(DLP) 11.5 < 11.5.2

References

https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_MISC

CVSS V3.1

Score:
5.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.