CVE-2022-1257: 
Trellix Agent vulnerability analysis and mitigation

CVE-2022-1257 is an insecure storage of sensitive information vulnerability affecting McAfee Agent (MA) for Linux, macOS, and Windows versions prior to 5.7.6. The vulnerability was discovered and disclosed in April 2022, with the initial CVE record being created on April 6, 2022 (CVE Details).

The vulnerability stems from the insecure storage of sensitive information in the ma.db file. The issue has been assigned a CVSS v3.1 base score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-922 (Insecure Storage of Sensitive Information) (NVD).

The vulnerability allows local users to gain access to sensitive information stored in the ma.db file. The exposure of this sensitive information could potentially lead to unauthorized access to system data (NVD).

The vulnerability requires local access to the system and low privileges to exploit. No known exploits in the wild have been reported at the time of assessment (Rapid7).

The vulnerability has been addressed in McAfee Agent version 5.7.6 and later, where the sensitive information has been moved to encrypted database files. Users are advised to upgrade to the latest version to mitigate this vulnerability (NVD).