Lucene search

TrellixCVE-2020-7322

HistorySep 09, 2020 - 10:15 a.m.

CVE-2020-7322

2020-09-0910:15:11

CWE-532

trellix

web.nvd.nist.gov

information security

cve-2020-7322

mcafee endpoint security

ens

windows

vulnerability

information disclosure

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

AI Score

4.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.

Affected configurations

Nvd

Node

mcafeeendpoint_securityRange<10.7.0windows

VendorProductVersionCPE
mcafeeendpoint_security*cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
mcafee	endpoint_security	*	cpe:2.3:a:mcafee:endpoint_security::::::windows::*

CNA Affected

[
  {
    "product": "Endpoint Security for Windows",
    "vendor": "McAfee LLC",
    "versions": [
      {
        "lessThan": "10.7.0 September 2020 Update",
        "status": "affected",
        "version": "10.7.x",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10327

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L

AI Score

4.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2020-7322