McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information

Exploit Title: McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information Date: 24 June 2025 Exploit Author: Keenan Scott Vendor Homepage: hxxps://www.mcafee.com/ Software Download: N/A Unable to find Version: Arguments CmdletBinding param string$DbSource =...

CVE-2022-1257

creationtimestamp| type| source ---|---|--- 2022-04-14 18:19:05+00:00| seen| https://t.me/cibsecurity/40777 2025-06-25 03:00:05+00:00| published-proof-of-concept| Telegram/pUfnhaLV4iQSz5wNjxln12A4BK4d06xT0RCTqD4hn9oNJp0 2025-06-25 09:00:03+00:00| published-proof-of-concept|...

CVE-2022-1257 Improper Verification of Cryptographic Signature by McAfee Agent

Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files...

CVE-2022-1257

Summary of CVE-2022-1257 in McAfee Agent (Tre llix Agent) : The vulnerability affects MA for Linux, macOS, and Windows prior to version 5.7.6, where sensitive data could be exposed through the ma.db storage. The root cause is insecure storage of credentials in ma.db, with sensitive information mo...