CVE-2020-7339
Medium
Description
Use of a Broken or Risky Cryptographic Algorithm vulnerability in McAfee Database Security Server and Sensor prior to 4.8.0 in the form of a SHA1 signed certificate that would allow an attacker on the same local network to potentially intercept communication between the Server and Sensors.
SeverityMedium
CVSS6.3
Exploit probability—
ProductMcafee Database Security
PublishedDec 10, 2020
First seenDec 10, 2020
Weakness typeCWE-327CWE-327
How to fix
Update
- mcafee database_security4.8.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee database_security | v < 4.8.0 | 4.8.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.