← Back

CVE-2020-7322

nvd nist
Published: Sep 9, 2020Modified: Jun 17, 2026

JSON object

Loading...
4.7
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
Exploitability: 0.6 / Impact: 3.7
Source: NVD

Description

Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.

Affected (1)

Mcafee
1 product
Endpoint Security
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Endpoint Security
Before 10.7.0

Related CWEs

CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

Source: trellixpsirt@trellix.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.