110 matches found
CVE-2014-8522
The MySQL database in McAfee Network Data Loss Prevention NDLP before 9.3 does not require a password, which makes it easier for remote attackers to obtain access...
CVE-2014-8526
McAfee Network Data Loss Prevention (NDLP) prior to version 9.3 is affected by a local information-disclosure vulnerability where an attacker can read a Java stack trace to obtain sensitive information. The available documents confirm the affected product and symptom (stack trace exposure) and th...
CVE-2014-8531
The CVE-2014-8531 entry concerns McAfee Network Data Loss Prevention (NDLP) TLS/SSL Server prior to version 9.3. The issue is that the TLS/SSL Server uses weak cipher algorithms, enabling remote authenticated users to execute arbitrary code via unspecified vectors. Documents explicitly link the v...
CVE-2014-8532
Technical details about CVE-2014-8532 are not publicly available in the provided documents. The records describe an unspecified vulnerability in McAfee NDLP prior to 9.3 but do not specify affected components, root cause, or fixes. Monitor for updates.
CVE-2014-8533
CVE-2014-8533 affects McAfee Network Data Loss Prevention (NDLP) prior to version 9.3. The issue allows remote attackers to execute arbitrary code via vectors related to ICMP redirection, resulting in potential impact to confidentiality, integrity, and availability as stated by NVD (base score 7....
CVE-2014-8529
McAfee Network Data Loss Prevention NDLP before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors...
CVE-2014-8528
CVE-2014-8528 affects McAfee Network Data Loss Prevention (NDLP) prior to 9.3. The issue is that session IDs are logged, allowing local users to read the audit log and obtain sensitive information (partial confidentiality impact). No remediation or patch/version details are provided in the suppli...
CVE-2014-8519
McAfee Network Data Loss Prevention (NDLP)
CVE-2014-8531
The TLS/SSL Server in McAfee Network Data Loss Prevention NDLP before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors...