nvd-json-data-feeds/CVE-2020/CVE-2020-73xx/CVE-2020-7306.json

{
  "id": "CVE-2020-7306",
  "sourceIdentifier": "psirt@mcafee.com",
  "published": "2020-08-13T03:15:14.883",
  "lastModified": "2022-07-01T17:01:12.527",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text"
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Almacenamiento de Credenciales No Protegido en McAfee Data Loss Prevention (DLP) para Mac versiones anteriores a 11.5.2, permite a usuarios locales conseguir acceso al nombre de usuario y contrase\u00f1a de ADRMS por medio de archivos de registro no protegidos que contienen texto plano"
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE",
          "baseScore": 5.2,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 2.7
      },
      {
        "source": "psirt@mcafee.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE",
          "baseScore": 5.2,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 2.7
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "accessVector": "LOCAL",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-522"
        }
      ]
    },
    {
      "source": "psirt@mcafee.com",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-522"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.3.0",
              "versionEndExcluding": "11.3.31",
              "matchCriteriaId": "599459F2-B2FF-4A5B-A03E-362DE2BFB91B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.4.0",
              "versionEndExcluding": "11.4.200",
              "matchCriteriaId": "C387BBB4-FD6A-40EB-B02A-297E45291EF1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:mcafee:data_loss_prevention:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.0",
              "versionEndExcluding": "11.5.2",
              "matchCriteriaId": "0A421570-C83E-4675-BDCB-012C691553D5"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10326",
      "source": "psirt@mcafee.com",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}