CVEvulnerability

CVE-2020-7307

5.2 MEDIUM Published 2020-08-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS 3.1 ([email protected])
5.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-522

Description

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.

Affected configurations

• mcafee data loss prevention (>= 11.3.0 < 11.3.28) • mcafee data loss prevention (>= 11.4.0 < 11.4.200) • mcafee data loss prevention (>= 11.5.0 < 11.5.3)

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References