MEDIUM
DLP for Mac - Unprotected Storage of Credentials
Published Aug 13, 2020
5.2
MEDIUMCVSS 3.1
EPSS 0.26%
Description
Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.
Affected products
-
- Version 11.3StatusaffectedConstraints<11.3.31
- Version 11.4StatusaffectedConstraints<11.4.200
- Version 11.5StatusaffectedConstraints<11.5.2
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| McAfee | Data Loss Prevention(DLP) | n/a |
|
OR
- ≥ 11.3.0 · < 11.3.28
- ≥ 11.4.0 · < 11.4.200
- ≥ 11.5.0 · < 11.5.3
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28434 Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10326 x_refsource_MISC
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28434 | Advisory | |
| https://kc.mcafee.com/corporate/index?page=content&id=SB10326 | x_refsource_MISC |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner trellix
Published Aug 13, 2020
Updated Aug 4, 2024
Reserved Jan 21, 2020
Link CVE-2020-7307
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-28434 Assigner trellix
Published Aug 13, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-28434