PT-2012-1282 · Mcafee · Mcafee Data Loss Prevention

Published 2012-08-22 · Updated 2017-08-29 · CVE-2009-5117

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Host Data Loss Prevention (DLP) versions 3.x before 3.0.100.10 McAfee Host Data Loss Prevention (DLP) versions 9.x before 9.0.0.422

Description The issue allows local users to obtain sensitive information from web traffic by reading unspecified files when the Web Post Protection feature is used with HTTP Capture mode enabled.

Recommendations For versions 3.x before 3.0.100.10, update to version 3.0.100.10 or later. For versions 9.x before 9.0.0.422, update to version 9.0.0.422 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2009-5117

Affected Products

Mcafee Data Loss Prevention

References · 3

• https://kc.mcafee.com/corporate/index?page=content&id=SB10011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-5117 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78447 · Note