CVE-2020-7322mediumCWE-532

CVE-2020-7322: medium-severity vulnerability in McAfee LLC Endpoint Security for Windows

Exposure of Sensitive Information in ENS for Windows

Published · Updated

Follow this CVE+ Monitor McAfee Endpoint Security

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.7epss 0.2%
Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
Affected products
McAfee LLC · Endpoint Security for Windows
Related CVEs — McAfee LLC Endpoint Security for Windows

In the same product, most dangerous first.

CVE-2020-7319HIGHImproper Access Control Vulnerability in ENS for WindowsEPSS 0.4%CVE-2020-7323MEDIUMAuthentication Protection Bypass vulnerability in ENS for WindowsEPSS 0.3%CVE-2020-7320MEDIUMProtection Mechanism Failure in ENS for WindowsEPSS 0.3%