{"id":"CVE-2020-7322","aliases":["EUVD-2020-28449","GHSA-9g6r-m8wp-hqcv"],"status":"published","title":"Exposure of Sensitive Information in ENS for Windows","description":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00246,"percentile":0.15917,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2020-09-09T09:30:16Z","modified":"2026-06-17T03:24:42Z","products":[{"vendor":"bitdefender","product":"endpoint security for windows"},{"vendor":"mcafee","product":"endpoint_security"},{"vendor":"mcafee llc","product":"endpoint security for windows"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10327","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7322"},{"url":"https://github.com/advisories/GHSA-9g6r-m8wp-hqcv"}],"sources":{"cve":[{"id":"CVE-2020-7322","title":"Exposure of Sensitive Information in ENS for Windows","description":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.","status":"published","published":"2020-09-09T09:30:16.088Z","modified":"2024-09-16T21:57:51.111Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:35:58.331892Z"}],"euvd":[{"id":"EUVD-2020-28449","description":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.","status":"published","published":"2020-09-09T09:30:16Z","modified":"2024-09-16T21:57:51Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:55:06.714252Z"}],"ghsa":[{"id":"GHSA-9g6r-m8wp-hqcv","title":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7...","description":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.","status":"published","published":"2022-05-24T17:27:49Z","modified":"2023-01-29T05:04:28Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:45:33.67375Z"}],"nvd":[{"id":"CVE-2020-7322","description":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.","status":"published","published":"2020-09-09T10:15:11.553Z","modified":"2026-06-17T03:24:42.927Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:06:14.981587Z"}]}}