Description
Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| McAfee,LLC | McAfee Agent | unspecified – < 5.7.6 | 5.7.6 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- McAfee Agent 5.7.6 - Insecure Storage of Sensitive Information EDB-52345 · remote · Jun 26, 2025
GitHub 1 repository
-
kayes817/CVE-2022-1257 ★ 0 · Jun 24, 2025
A script is a PoC for CVE-2022-1257, a vulnerability in the McAfee Agent (Trellix Agent) when working with it's database. The vulnerability allows attackers to retrieve and decrypt credentials from t…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2025-1407 McAfee Agent: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 26, 2025