Skip to content
OpenAdvisories
Medium · 5.2 CVE-2020-7307 EUVD-2020-28434GHSA-p7h6-mqjg-98w9

DLP for Mac - Unprotected Storage of Credentials

Published Aug 13, 2020 · Updated Aug 4, 2024 · Assigned by trellix

Description

Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.

Affected products

VendorProductAffectedFixed
McAfee Data Loss Prevention(DLP) 11.3 – < 11.3.31, 11.4 – < 11.4.200, 11.5 – < 11.5.2 11.3.31

References