{"api_version":"1","generated_at":"2026-07-23T09:42:14+00:00","cve":"CVE-2020-7322","urls":{"html":"https://cve.report/CVE-2020-7322","api":"https://cve.report/api/cve/CVE-2020-7322.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-7322","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7322"},"summary":{"title":"CVE-2020-7322","description":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.","state":"PUBLIC","assigner":"psirt@mcafee.com","published_at":"2020-09-09 10:15:00","updated_at":"2023-11-07 03:26:00"},"problem_types":["CWE-532"],"metrics":[],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","refsource":"","tags":[],"title":"McAfee Security Bulletin - Endpoint Security for Windows update fixes four vulnerabilities (CVE-2020-7319, CVE-2020-7320, CVE-2020-7322, and CVE-2020-7323)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7322","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7322","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"7322","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"endpoint_security","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"windows","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"7322","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"endpoint_security","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"windows","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"psirt@mcafee.com","DATE_PUBLIC":"2020-09-08T00:00:00.000Z","ID":"CVE-2020-7322","STATE":"PUBLIC","TITLE":"Exposure of Sensitive Information in ENS for Windows"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Endpoint Security for Windows ","version":{"version_data":[{"version_affected":"<","version_name":"10.7.x","version_value":"10.7.0 September 2020 Update"}]}}]},"vendor_name":"McAfee LLC"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-532: Insertion of Sensitive Information into Log File"}]}]},"references":{"reference_data":[{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10327"}]},"source":{"discovery":"INTERNAL"}},"nvd":{"publishedDate":"2020-09-09 10:15:00","lastModifiedDate":"2023-11-07 03:26:00","problem_types":["CWE-532"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseScore":4.7,"baseSeverity":"MEDIUM"},"exploitabilityScore":0.6,"impactScore":3.7},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"severity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*","versionEndExcluding":"10.7.0","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"7322","Ordinal":"167601","Title":"CVE-2020-7322","CVE":"CVE-2020-7322","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"7322","Ordinal":"1","NoteData":"Information Disclosure Vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to gain access to sensitive information via incorrectly logging of sensitive information in debug logs.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"7322","Ordinal":"2","NoteData":"2020-09-09","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"7322","Ordinal":"3","NoteData":"2020-09-09","Type":"Other","Title":"Modified"}]}}}