Exposure of Sensitive Information in ENS for Windows
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.7epss 0.2%
exploitation probability
0.2%top 84% of all CVEs
observed exploitation
nono source reports it
Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
Affected products
McAfee LLC · Endpoint Security for Windows