Multiple McAfee Products CVE-2014-8518 Insufficient Entropy Weakness
BID:70819
Info
Multiple McAfee Products CVE-2014-8518 Insufficient Entropy Weakness
| Bugtraq ID: | 70819 |
| Class: | Design Error |
| CVE: |
CVE-2014-8518 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 27 2014 12:00AM |
| Updated: | Oct 27 2014 12:00AM |
| Credit: | Matthias Deeg from SySS GmbH |
| Vulnerable: |
McAfee File and Removable Media Protection 4.3 McAfee Endpoint Encryption for Files and Folders 4.2 McAfee Endpoint Encryption for Files and Folders 4.1 McAfee Endpoint Encryption for Files and Folders 4.0 |
| Not Vulnerable: | |
Discussion
Multiple McAfee Products CVE-2014-8518 Insufficient Entropy Weakness
Multiple McAfee Products are prone to an entropy weakness.
Exploiting this issue can allow attackers to hijack another user's session and gain unauthorized access to the victim's account on the affected application.
Multiple McAfee Products are prone to an entropy weakness.
Exploiting this issue can allow attackers to hijack another user's session and gain unauthorized access to the victim's account on the affected application.
Exploit / POC
Multiple McAfee Products CVE-2014-8518 Insufficient Entropy Weakness
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple McAfee Products CVE-2014-8518 Insufficient Entropy Weakness
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.