TrellixCVELIST:CVE-2020-7299CVE-2020-7299 Sensitive Data Exposure vulnerability in McAfee True Key Windows Client
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N
5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific situations.
CNA Affected
[
{
"product": "McAfee True Key Windows client",
"vendor": "McAfee,LLC",
"versions": [
{
"lessThan": "6.2.110.8",
"status": "affected",
"version": "6.x",
"versionType": "custom"
}
]
}
]Related
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N
5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%