CVE-2020-7307

Name of the Vulnerable Software and Affected Versions McAfee Data Loss Prevention (DLP) for Mac versions prior to 11.5.2

Description The issue allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials. This is due to an Unprotected Storage of Credentials vulnerability.

Recommendations For versions prior to 11.5.2, update to version 11.5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of exploitation.