CVE-2020-7299CWE-522

Sensitive Data Exposure vulnerability in McAfee True Key Windows Client

Medium · published September 4, 2020

CVSS v3.1
5.0
EPSS
0%
Percentile
28.5
In the wild
Unconfirmed
What it is

Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific situations.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.5th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2020-09-04T14:05Z
EPSS history
Timeline
  • 04 SEP 14:05Z
    Sensitive Data Exposure vulnerability in McAfee True Key Windows Client
    cvelistv5