Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Endpoint_security | Mcafee | * | 10.7.0 (excluding) |
Potential Mitigations
Related Attack Patterns
References
- https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10327
- https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10327