{"id":"CVE-2020-7306","aliases":["EUVD-2020-28433","GHSA-fjmh-w72c-m4f6"],"status":"published","title":"DLP  for Mac   - Unprotected Storage of Credentials","description":"Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text","severity":{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00248,"percentile":0.16207,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-522"],"published":"2020-08-13T03:10:17Z","modified":"2026-06-17T03:24:41Z","products":[{"vendor":"mcafee","product":"data loss prevention(dlp)"},{"vendor":"mcafee","product":"data_loss_prevention"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10326","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7306"},{"url":"https://github.com/advisories/GHSA-fjmh-w72c-m4f6"}],"sources":{"cve":[{"id":"CVE-2020-7306","title":"DLP  for Mac   - Unprotected Storage of Credentials","description":"Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text","status":"published","published":"2020-08-13T03:10:17Z","modified":"2024-08-04T09:25:48.986Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28433","description":"Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text","status":"published","published":"2020-08-13T03:10:17Z","modified":"2024-08-04T09:25:48Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T03:08:00.054795Z"}],"ghsa":[{"id":"GHSA-fjmh-w72c-m4f6","title":"Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac...","description":"Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text","status":"published","published":"2022-05-24T17:25:37Z","modified":"2023-01-27T05:02:37Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:42:04.742793Z"}],"nvd":[{"id":"CVE-2020-7306","description":"Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text","status":"published","published":"2020-08-13T03:15:14.883Z","modified":"2026-06-17T03:24:41.433Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-522"],"updated_at":"2026-11-02T14:06:13.05572Z"}]}}