Vulnerabilities > CVE-2022-1257 - Insecure Storage of Sensitive Information vulnerability in Mcafee Agent

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

mcafee

CWE-922

NVD

Published: 2022-04-14

Updated: 2023-11-07

Summary

Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files.

Vulnerable Configurations

Part	Description	Count
Application	Mcafee Mcafee Agent - Mcafee Agent 4.0.0.1180 Mcafee Agent 4.0.0.1345 Mcafee Agent 4.0.0.1421 Mcafee Agent 4.0.0.1494 Mcafee Agent 4.0.11 Mcafee Agent 4.0.301 Mcafee Agent 4.5.0 Mcafee Agent 4.5.0.1270 Mcafee Agent 4.5.0.1499 Mcafee Agent 4.5.0.1810 Mcafee Agent 4.5.0.1817 Mcafee Agent 4.5.0.1927 Mcafee Agent 4.5.57 Mcafee Agent 4.5.101 Mcafee Agent 4.5.201 Mcafee Agent 4.5.202 Mcafee Agent 4.6.0 Mcafee Agent 4.6.0.1694 Mcafee Agent 4.6.0.3258 Mcafee Agent 4.6.109 Mcafee Agent 4.8.0 Mcafee Agent 5.0.0 Mcafee Agent 5.0.1 Mcafee Agent 5.0.2 Mcafee Agent 5.0.3 Mcafee Agent 5.0.4 Mcafee Agent 5.0.5 Mcafee Agent 5.0.6 Mcafee Agent 5.5.0 Mcafee Agent 5.5.1 Mcafee Agent 5.5.2 Mcafee Agent 5.5.3 Mcafee Agent 5.5.4 Mcafee Agent 5.6.0 Mcafee Agent 5.6.1 Mcafee Agent 5.6.4 Mcafee Agent 5.7.1	70

Common Weakness Enumeration (CWE)

CWE-922 - Insecure Storage of Sensitive Information

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10382