title: Exposure of Sensitive Information in ENS for Windows
description: Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.
problem types: CWE-532: Insertion of Sensitive Information into Log File
affected:
{
product: Endpoint Security for Windows
vendor: McAfee LLC
versions:
lessThan: 10.7.0 September 2020 Update, status: affected, version: 10.7.x, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
version: 3.1
]