Skip to content
OpenAdvisories
Medium · 5.0 CVE-2020-7299 EUVD-2020-28426GHSA-87jm-5jcp-mrf7

Sensitive Data Exposure vulnerability in McAfee True Key Windows Client

Published Sep 4, 2020 · Updated Sep 16, 2024 · Assigned by trellix

Description

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific situations.

Affected products

VendorProductAffectedFixed
McAfee,LLC McAfee True Key Windows client 6.x – < 6.2.110.8 6.2.110.8

References