title: DLP  for Mac   - Unprotected Storage of Credentials
description: Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text
problem types: CWE-522: Insufficiently Protected Credentials
affected:
{
product: Data Loss Prevention(DLP)
vendor: McAfee
versions:
lessThan: 11.3.31, status: affected, version: 11.3, versionType: custom
lessThan: 11.4.200, status: affected, version: 11.4, versionType: custom
lessThan: 11.5.2, status: affected, version: 11.5, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.2
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
version: 3.1
]