Design/Logic Flaw

2021-04-1508:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence (GTI) servers using DNS allows a remote attacker to view the requests from ENS and responses from GTI over DNS. By gaining control of an intermediate DNS server or altering the network DNS configuration, it is possible for an attacker to intercept requests and send their own responses.

CPENameOperatorVersion
endpoint_securityeq10.7.0 february-2020
endpoint_securityeq10.7.0 july-2020
endpoint_securityeq10.7.0 november-2020
endpoint_securityeq10.7.0 september-2020
endpoint_securityeq10.6.1 november-2018
endpoint_securityeq10.6.1 december-2018
endpoint_securityeq10.6.1 february-2019
endpoint_securityeq10.6.1 may-2019
endpoint_securityeq10.6.1 july-2019
endpoint_securityeq10.6.1 october-2019

Name	Operator	Version
endpoint_security	eq	10.7.0 february-2020
endpoint_security	eq	10.7.0 july-2020
endpoint_security	eq	10.7.0 november-2020
endpoint_security	eq	10.7.0 september-2020
endpoint_security	eq	10.6.1 november-2018
endpoint_security	eq	10.6.1 december-2018
endpoint_security	eq	10.6.1 february-2019
endpoint_security	eq	10.6.1 may-2019
endpoint_security	eq	10.6.1 july-2019
endpoint_security	eq	10.6.1 october-2019