CVE-2014-8525

CVE-2014-8525 affects McAfee Network Data Loss Prevention (NDLP) prior to 9.3, where the session cookie Set-Cookie header omits the HttpOnly flag. This allows script access to the cookie, potentially exposing sensitive information. The provided sources describe the issue but do not specify affect...