CVE-2014-8523

Cross-site request forgery CSRF vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-8525

McAfee Network Data Loss Prevention NDLP before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...

CVE-2014-8532

Unspecified vulnerability in McAfee Network Data Loss Prevention before NDLP before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting...

CVE-2014-8533

McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection...

CVE-2014-8519

McAfee Network Data Loss Prevention (NDLP)

CVE-2014-8523

CVE-2014-8523 describes a CSRF vulnerability in McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The flaw could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors; the exact attack vectors and exploited components are not detailed in the...

CVE-2014-8530

The vulnerability CVE-2014-8530 affects McAfee Network Data Loss Prevention (NDLP) before version 9.3. It is described as an unspecified vulnerability allowing remote attackers to obtain sensitive information, impact integrity, or cause a denial of service via unknown vectors, with the issue rela...

CVE-2014-8532

Technical details about CVE-2014-8532 are not publicly available in the provided documents. The records describe an unspecified vulnerability in McAfee NDLP prior to 9.3 but do not specify affected components, root cause, or fixes. Monitor for updates.

CVE-2014-8522

CVE-2014-8522 concerns the MySQL database component used by McAfee Network Data Loss Prevention (NDLP). The vulnerability stems from the NDLP deployment permitting unauthenticated access to its MySQL database prior to version 9.3, meaning remote attackers could gain access without credentials. Pu...

CVE-2014-8534

Technical details such as affected products/versions, root cause, exploitability, or fixes are not publicly provided in the connected documents. Monitor for updates from vendors and advisories to obtain concrete information.

CVE-2014-8537

CVE-2014-8537 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.2.2. The vulnerability allows local users to obtain sensitive information by reading NDLP logs. The available documents confirm the affected product and the basic impact (information disclosure via logs); a deeper...

CVE-2014-8530

Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related to simultaneous logins...

CVE-2014-8520

CVE-2014-8520 affects McAfee Network Data Loss Prevention (NDLP) older than version 9.3. Public sources describe an information disclosure vulnerability where remote attackers can obtain sensitive data via vectors related to open network ports. The available documents do not provide specific tech...

PT-2014-8589

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows local users to obtain sensitive information by reading a Java stack trace. Recommendations For versions prior to 9.3, update to version 9.3 or later to...

PT-2014-8586

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention versions prior to 9.3 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of victims. The exact vectors used for the attack are not specified. Recommendations...

PT-2014-8585

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention versions prior to 9.3 Description The issue concerns the MySQL database in the software, which does not require a password for access. This makes it easier for remote attackers to obtain access...

PT-2014-8583

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows remote attackers to obtain sensitive information via vectors related to open network ports. Recommendations For versions prior to 9.3, update to versio...

PT-2014-8584

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via unspecified vectors. Recommendations...

PT-2014-8590

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows local users to obtain sensitive information and affect integrity. This is related to a plain text password. Recommendations For versions prior to 9.3,...

PT-2014-8592

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention NDLP versions prior to 9.3 Description The issue allows local users to obtain sensitive information due to the storage of the SSH key in cleartext. Recommendations For versions prior to 9.3, update to versio...