CVE-2020-7322
Exposure of Sensitive Information in ENS for Windows
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Sep 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
Affected products
McAfee LLC · Endpoint Security for WindowsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →