CVE-2022-1257

Published: Apr 14, 2022Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files.

Affected (1)

Products: Mcafee: Agent

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Agent	Before 5.7.6

Related CWEs

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10382

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10382

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.