From f2e985aabeb5a43b62eda1eff8f52c1b8ce4d22b Mon Sep 17 00:00:00 2001
From: zli <zhemou_li@mcafee.com>
Date: Wed, 12 Aug 2020 22:16:54 -0500
Subject: [PATCH] Publish CVE-2020-7307

---
 2020/7xxx/CVE-2020-7307.json | 93 +++++++++++++++++++++++++++++++++---
 1 file changed, 86 insertions(+), 7 deletions(-)

diff --git a/2020/7xxx/CVE-2020-7307.json b/2020/7xxx/CVE-2020-7307.json
index 6e969f89ae0..0dc7ced6352 100644
--- a/2020/7xxx/CVE-2020-7307.json
+++ b/2020/7xxx/CVE-2020-7307.json
@@ -1,18 +1,97 @@
 {
-    "data_type": "CVE",
-    "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
+        "ASSIGNER": "psirt@mcafee.com",
         "ID": "CVE-2020-7307",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "STATE": "PUBLIC",
+        "TITLE": "DLP  for Mac   - Unprotected Storage of Credentials"
     },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Data Loss Prevention(DLP)",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<",
+                                            "version_name": "11.3",
+                                            "version_value": "11.3.31"
+                                        },
+                                        {
+                                            "version_affected": "<",
+                                            "version_name": "11.4",
+                                            "version_value": "11.4.200"
+                                        },
+                                        {
+                                            "version_affected": "<",
+                                            "version_name": "11.5",
+                                            "version_value": "11.5.2"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    },
+                    "vendor_name": "McAfee"
+                }
+            ]
+        }
+    },
+    "data_format": "MITRE",
+    "data_type": "CVE",
+    "data_version": "4.0",
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials."
             }
         ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.0.9"
+    },
+    "impact": {
+        "cvss": {
+            "attackComplexity": "LOW",
+            "attackVector": "LOCAL",
+            "availabilityImpact": "NONE",
+            "baseScore": 5.2,
+            "baseSeverity": "MEDIUM",
+            "confidentialityImpact": "LOW",
+            "integrityImpact": "LOW",
+            "privilegesRequired": "LOW",
+            "scope": "CHANGED",
+            "userInteraction": "NONE",
+            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
+            "version": "3.1"
+        }
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-256 Unprotected Storage of Credentials"
+                    }
+                ]
+            }
+        ]
+    },
+    "references": {
+        "reference_data": [
+            {
+                "refsource": "CONFIRM",
+                "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10326"
+            }
+        ]
+    },
+    "source": {
+        "advisory": "SB10326",
+        "discovery": "EXTERNAL"
     }
-}
\ No newline at end of file
+}