McAfee Network Data Loss Prevention Logs Local Information Disclosure Vulnerability

Bugtraq ID:	61345
Class:	Design Error
CVE:	CVE-2014-8537
Remote:	No
Local:	Yes
Published:	Jul 11 2013 12:00AM
Updated:	Oct 30 2014 01:01PM
Credit:	Graeme Bell and Jamie Ooi of BAE Systems Detica
Vulnerable:
Not Vulnerable:

McAfee Network Data Loss Prevention Logs Local Information Disclosure Vulnerability

McAfee Network Data Loss Prevention is prone to a local information-disclosure vulnerability.

Exploiting this issue may allow a local attacker to obtain sensitive information that may aid in further attacks.

The following versions are vulnerable:

McAfee Network Data Loss Prevention 8.6 and prior
McAfee Network Data Loss Prevention 9.2.0
McAfee Network Data Loss Prevention 9.2.1

McAfee Network Data Loss Prevention Logs Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

McAfee Network Data Loss Prevention Logs Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

McAfee Network Data Loss Prevention Logs Local Information Disclosure Vulnerability

References: