CVE search · CVE-2022-1257
CVE-2022-1257
medium 5.5
Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files.
Details
- Status
- Modified
- Published
- Last changed
- Source
- trellixpsirt@trellix.com
- Weakness
- CWE-922
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 6.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N |
trellixpsirt@trellix.comSecondary |
| CVSS 3.1 | medium 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
nvd@nist.govPrimary |
| CVSS 2.0 | low 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- mcafee · agent