Vulnerability · Published Dec 9, 2020 · Assigned by trellix
CVE-2020-7339Database Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm
Medium 6.3
In plain English
A medium-severity broken cryptography in Database Security from McAfee. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.2%top 93.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| McAfee | Database Security | unspecified – before 4.8.0 |
Weakness: CWE-327 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10340 x_refsource_MISC