What is CVE-2020-7307?

CVE-2020-7307 is a medium-severity vulnerability in Mcafee Data Loss Prevention, classified under Insufficiently Protected Credentials. CVSS score: 5.2/10. Published 2020-08-13.

How severe is CVE-2020-7307?

Medium severity. CVSS v3 base score is 5.2 out of 10.

Vulnerability in Mcafee Data Loss Prevention

CVE-2020-7307

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.

EPSS: 0.003 (17.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N.

Affected products

Mcafee Data_loss_prevention
Mcafee Data Loss Prevention(dlp) — versions 11.3, 11.4, 11.5

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

trellixpsirt@trellix.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-7307?: CVE-2020-7307 is a medium-severity vulnerability in Mcafee Data Loss Prevention, classified under Insufficiently Protected Credentials. CVSS score: 5.2/10. Published 2020-08-13.
How severe is CVE-2020-7307?: Medium severity. CVSS v3 base score is 5.2 out of 10.