CVE-2020-7308CWE-319

Transmission of data in clear text by McAfee ENS

Medium · published April 15, 2021

CVSS v3.1
4.8
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

Cleartext Transmission of Sensitive Information between McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update and McAfee Global Threat Intelligence (GTI) servers using DNS allows a remote attacker to view the requests from ENS and responses from GTI over DNS. By gaining control of an intermediate DNS server or altering the network DNS configuration, it is possible for an attacker to intercept requests and send their own responses.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00509 · 42.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2021-04-15T07:40Z
EPSS history
Timeline
  • 15 APR 07:40Z
    Transmission of data in clear text by McAfee ENS
    cvelistv5