Design/Logic Flaw

2017-10-3114:29:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.0%

JSON

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver.

CPENameOperatorVersion
network_data_loss_preventionle9.3.0

CPE	Name	Operator	Version
	network_data_loss_prevention	le	9.3.0

References

www.securityfocus.com/bid/101695

kc.mcafee.com/corporate/index?page=content&id=SB10198