PT-2014-8589 · Mcafee · Mcafee Network Data Loss Prevention

Published 2014-10-29 · Updated 2014-10-30 · CVE-2014-8526

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention (NDLP) versions prior to 9.3

Description The issue allows local users to obtain sensitive information by reading a Java stack trace.

Recommendations For versions prior to 9.3, update to version 9.3 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-8526

Affected Products

Mcafee Network Data Loss Prevention

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-8526 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10053 · Vendor Advisory