PT-2020-19541 · Mcafee · Mcafee Data Loss Prevention (Dlp) For Mac

Published 2020-08-13 · Updated 2022-06-01 · CVE-2020-7307

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention (DLP) for Mac versions prior to 11.5.2

Description The issue allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials. This is due to an Unprotected Storage of Credentials vulnerability.

Recommendations For versions prior to 11.5.2, update to version 11.5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-7307

Affected Products

Mcafee Data Loss Prevention (Dlp) For Mac

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-7307 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7307 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10326 · Note