CVE-2014-8528

CVE-2014-8528 affects McAfee Network Data Loss Prevention (NDLP) prior to 9.3. The issue is that session IDs are logged, allowing local users to read the audit log and obtain sensitive information (partial confidentiality impact). No remediation or patch/version details are provided in the suppli...

PT-2014-8589

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows local users to obtain sensitive information by reading a Java stack trace. Recommendations For versions prior to 9.3, update to version 9.3 or later to...

PT-2014-8586

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention versions prior to 9.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendations...

PT-2014-8585

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention versions prior to 9.3 Description The issue concerns the MySQL database in the software, which does not require a password for access. This makes it easier for remote attackers to obtain access...

PT-2014-8588

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue makes it easier for remote attackers to obtain potentially sensitive information via script access to the session cookie, as the HTTPOnly flag is not included...

PT-2014-8583

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows remote attackers to obtain sensitive information via vectors related to open network ports. Recommendations For versions prior to 9.3, update to versio...

PT-2014-8584

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations...

PT-2014-8590

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows local users to obtain sensitive information and affect integrity. This is related to a plain text password. Recommendations For versions prior to 9.3,...

PT-2014-8592

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows local users to obtain sensitive information due to the storage of the SSH key in cleartext. Recommendations For versions prior to 9.3, update to versio...

PT-2014-8594

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue concerns the use of weak cipher algorithms in the TLS/SSL Server, making it easier for remote authenticated users to execute arbitrary code. Recommendations F...

PT-2014-8597

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.2.2 Description The issue is related to an unspecified vulnerability in the login form. It allows local users to cause a denial of service by providing a crafted value in the domain...

PT-2014-8599

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.2.2 Description The issue allows local users to obtain sensitive information by reading unspecified error messages. Recommendations For versions prior to 9.2.2, update to version 9.2...

PT-2014-8600

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.2.2 Description The issue allows local users to obtain sensitive information by reading the logs. Recommendations For versions prior to 9.2.2, update to version 9.2.2 or later to...

PT-2014-8598

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.2.2 Description The issue allows local users to bypass intended restrictions on unspecified functionality. Recommendations For versions prior to 9.2.2, update to version 9.2.2 or lat...

PT-2014-8595

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting. Recommendations For versions prior...

PT-2014-8587

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors because the autocomplete setting for the password and other fields is not...

CVE-2014-8525: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...

PT-2014-8582

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.2.2 Description The issue allows local users to read arbitrary files. The exact mechanism of exploitation is not specified. Recommendations For versions prior to 9.2.2, update to...

CVE-2014-8536: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages...

CVE-2014-8526: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information by reading a Java stack trace...