CVE-2020-7299: Sensitive Data Exposure vulnerability in McAfee True Key Windows Client
Cleartext Storage of Sensitive Information in Memory vulnerability in Microsoft Windows client in McAfee True Key (TK) prior to 6.2.109.2 allows a local user logged in with administrative privileges to access to another user’s passwords on the same machine via triggering a process dump in specific situations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-7299?
CVE-2020-7299 is categorized as a high severity vulnerability due to the potential exposure of sensitive passwords.
How do I fix CVE-2020-7299?
To fix CVE-2020-7299, upgrade McAfee True Key to version 6.2.109.2 or later.
What systems are affected by CVE-2020-7299?
CVE-2020-7299 affects McAfee True Key prior to version 6.2.109.2 on Windows operating systems.
Can a non-administrative user exploit CVE-2020-7299?
No, only users with administrative privileges can exploit CVE-2020-7299 to access other users' passwords.
What type of information is exposed in CVE-2020-7299?
CVE-2020-7299 exposes sensitive information, specifically user passwords stored in memory.