CVE-2022-1257

Improper Verification of Cryptographic Signature by McAfee Agent

State: Published
Severity: 6.1 Medium
Published: Apr 14, 2022
Updated: Aug 2, 2024
Reserved: Apr 6, 2022

Description

Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N	trellix

Weaknesses

CWE-922 Insecure Storage of Sensitive Information

Affected Products

Product	Versions
McAfee AgentMcAfee,LLC	before 5.7.6Affected

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10382

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.