McAfee Network Data Loss Prevention Local Security Bypass Vulnerability

Bugtraq ID:	61346
Class:	Unknown
CVE:	CVE-2014-8535
Remote:	No
Local:	Yes
Published:	Jul 11 2013 12:00AM
Updated:	Oct 30 2014 01:01PM
Credit:	Graeme Bell and Jamie Ooi of BAE Systems Detica
Vulnerable:
Not Vulnerable:

McAfee Network Data Loss Prevention Local Security Bypass Vulnerability

McAfee Network Data Loss Prevention is prone to a local security-bypass vulnerability.

Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

The following versions are vulnerable:

McAfee Network Data Loss Prevention 8.6 and prior
McAfee Network Data Loss Prevention 9.2.0
McAfee Network Data Loss Prevention 9.2.1

McAfee Network Data Loss Prevention Local Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

McAfee Network Data Loss Prevention Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

McAfee Network Data Loss Prevention Local Security Bypass Vulnerability

References: