{"id":"CVE-2020-7322","state":"PUBLISHED","title":"Exposure of Sensitive Information in ENS for Windows","description":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.","publishedAt":"2020-09-09T09:30:16.088Z","updatedAt":"2024-09-16T21:57:51.111Z","severity":{"score":4.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","source":"trellix"},"assigner":"trellix","products":["McAfee LLC Endpoint Security for Windows"],"affected":[{"vendor":"McAfee LLC","product":"Endpoint Security for Windows","versions":[{"version":"10.7.x","status":"affected","lessThan":"10.7.0 September 2020 Update","versionType":"custom"}]}],"references":["https://kc.mcafee.com/corporate/index?page=content&id=SB10327"],"weaknesses":["CWE-532"],"ingestedAt":"2026-10-29T19:47:41.446Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/7xxx/CVE-2020-7322.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-7322","state":"PUBLISHED","datePublished":"2020-09-09T09:30:16.088Z","dateUpdated":"2024-09-16T21:57:51.111Z","assignerShortName":"trellix","assignerOrgId":"01626437-bf8f-4d1c-912a-893b5eb04808","dateReserved":"2020-01-21T00:00:00.000Z"},"containers":{"cna":{"title":"Exposure of Sensitive Information in ENS for Windows","descriptions":[{"lang":"en","value":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs."}],"affected":[{"vendor":"McAfee LLC","product":"Endpoint Security for Windows","versions":[{"version":"10.7.x","status":"affected","lessThan":"10.7.0 September 2020 Update","versionType":"custom"}]}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-532","description":"CWE-532: Insertion of Sensitive Information into Log File","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"trellix","dateUpdated":"2020-09-09T09:30:16.000Z","orgId":"01626437-bf8f-4d1c-912a-893b5eb04808"},"datePublic":"2020-09-08T00:00:00.000Z","source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@mcafee.com","DATE_PUBLIC":"2020-09-08T00:00:00.000Z","ID":"CVE-2020-7322","STATE":"PUBLIC","TITLE":"Exposure of Sensitive Information in ENS for Windows"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Endpoint Security for Windows","version":{"version_data":[{"version_affected":"<","version_name":"10.7.x","version_value":"10.7.0 September 2020 Update"}]}}]},"vendor_name":"McAfee LLC"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-532: Insertion of Sensitive Information into Log File"}]}]},"references":{"reference_data":[{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327"}]},"source":{"discovery":"INTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T09:25:48.949Z"}}]}}}