exploitDog

CVE-2014-8524

Опубликовано: 29 окт. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors.

Ссылки

https://kc.mcafee.com/corporate/index?page=content&id=SB10053
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10053
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*

Версия до 9.2.2 (включая)

cpe:2.3:a:mcafee:network_data_loss_prevention:8.6:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00403

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-8fwv-p5f2-v3rj

github

больше 3 лет назад

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors.

EPSS

Процентиль: 60%

0.00403

Низкий

5 Medium

CVSS2

Дефекты

CWE-200