CVE-2020-7322 - Exposure of Sensitive Information in ENS for Windows

Back Back to CVE browser

MEDIUM

Exposure of Sensitive Information in ENS for Windows

Published Sep 9, 2020

4.7

MEDIUM

CVSS 3.1

EPSS 0.25%

Description

Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.

Affected products

Vendor McAfee LLC Product Endpoint Security for Windows Default
n/a
- Version
  10.7.x
  Status
  affected
  Constraints
  <10.7.0 September 2020 Update

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

McAfee LLC

Endpoint Security for Windows

n/a

Version	Status	Constraints
10.7.x	affected	<10.7.0 September 2020 Update

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (1)

https://kc.mcafee.com/corporate/index?page=content&id=SB10327
x_refsource_CONFIRM

Link	Providers	Tags
https://kc.mcafee.com/corporate/index?page=content&id=SB10327		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Sep 9, 2020

Updated Sep 16, 2024

Reserved Jan 21, 2020

Link CVE-2020-7322

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7322

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-7322