4294 matches found
Design/Logic Flaw
McAfee Network Data Loss Prevention NDLP before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...
Design/Logic Flaw
McAfee Network Data Loss Prevention NDLP before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log...
CVE-2014-8523
CVE-2014-8523 describes a CSRF vulnerability in McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The flaw could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors; the exact attack vectors and exploited components are not detailed in the...
CVE-2014-8525
CVE-2014-8525 affects McAfee Network Data Loss Prevention (NDLP) prior to 9.3, where the session cookie Set-Cookie header omits the HttpOnly flag. This allows script access to the cookie, potentially exposing sensitive information. The provided sources describe the issue but do not specify affect...
CVE-2014-8519
Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to read arbitrary files via unknown vectors...
CVE-2014-8537
McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to obtain sensitive information by reading the logs...
CVE-2014-8534
Technical details such as affected products/versions, root cause, exploitability, or fixes are not publicly provided in the connected documents. Monitor for updates from vendors and advisories to obtain concrete information.
CVE-2014-8535
CVE-2014-8535 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.2.2. The vulnerability allows local users to bypass a restriction on an unspecified functionality via unknown vectors. The provided documents identify the affected product and version and describe the impact (bypa...
CVE-2014-8524
CVE-2014-8524 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The vulnerability arises because the autocomplete setting for passwords and other fields is not disabled, allowing remote attackers to obtain sensitive information via unspecified vectors. This is corroborated ...
CVE-2014-8520
CVE-2014-8520 affects McAfee Network Data Loss Prevention (NDLP) older than version 9.3. Public sources describe an information disclosure vulnerability where remote attackers can obtain sensitive data via vectors related to open network ports. The available documents do not provide specific tech...
CVE-2014-8537
CVE-2014-8537 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.2.2. The vulnerability allows local users to obtain sensitive information by reading NDLP logs. The available documents confirm the affected product and the basic impact (information disclosure via logs); a deeper...
CVE-2014-8520
McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information via vectors related to open network ports...
CVE-2014-8533
McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to execute arbitrary code via vectors related to ICMP redirection...
CVE-2014-8526
McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information by reading a Java stack trace...
CVE-2014-8529
CVE-2014-8529 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The issue is that the product stores the SSH key in cleartext, enabling local users to obtain sensitive information via unspecified vectors. The documents provide the vulnerability presence and its information-...
CVE-2014-8530
The vulnerability CVE-2014-8530 affects McAfee Network Data Loss Prevention (NDLP) before version 9.3. It is described as an unspecified vulnerability allowing remote attackers to obtain sensitive information, impact integrity, or cause a denial of service via unknown vectors, with the issue rela...
CVE-2014-8532
Unspecified vulnerability in McAfee Network Data Loss Prevention before NDLP before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting...
CVE-2014-8523
Cross-site request forgery CSRF vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-8533
CVE-2014-8533 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The issue allows remote attackers to execute arbitrary code via vectors related to ICMP redirection, resulting in potential impact to confidentiality, integrity, and availability as stated by NVD (base score 7....