title: McAfee Agent update fixes an Information Disclosure vulnerability
description: Information Disclosure vulnerability in Remote logging (which is disabled by default) in McAfee Agent (MA) 5.x allows remote unauthenticated users to access sensitive information via remote logging when it is enabled.
problem types: Information Disclosure vulnerability
affected:
{
product: McAfee Agent (MA)
vendor: McAfee, LLC
versions:
lessThan: 5.6.0 HF1, status: affected, version: 5.x, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
version: 3.0
]