Lucene search

K
cve[email protected]CVE-2014-8518
HistoryOct 29, 2014 - 2:55 p.m.

CVE-2014-8518

2014-10-2914:55:04
CWE-255
web.nvd.nist.gov
22
cve-2014-8518
mcafee
frp
eeff
encryption
vulnerability
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The (1) Removable Media and (2) CD and DVD encryption offsite access options (formerly Endpoint Encryption for Removable Media or EERM) in McAfee File and Removable Media Protection (FRP) 4.3.0.x, and Endpoint Encryption for Files and Folders (EEFF) 3.2.x through 4.2.x, uses a hard-coded salt, which makes it easier for local users to obtain passwords via a brute force attack.

Affected configurations

NVD
Node
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.0.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.1.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.2.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.4.1
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.5.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.6
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.6.3
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.7
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.7.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.8
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch3.2.9.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch4.0.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch4.0.0.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch4.0.1
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch4.0.1.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch4.1.0
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch4.1.1
OR
mcafeeendpoint_encryption_for_files_and_foldersMatch4.2.0
OR
mcafeefile_and_removable_media_protectionMatch4.3.0
OR
mcafeefile_and_removable_media_protectionMatch4.3.0.224
OR
mcafeefile_and_removable_media_protectionMatch4.3.0.243

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2014-8518