McAfee Network Data Loss Prevention CVE-2014-8526 Local Information Disclosure Vulnerability

Bugtraq ID:	70822
Class:	Design Error
CVE:	CVE-2014-8526
Remote:	No
Local:	Yes
Published:	Oct 03 2014 12:00AM
Updated:	Oct 03 2014 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	McAfee Network Data Loss Prevention 9.2.2 McAfee Network Data Loss Prevention 9.2.1 McAfee Network Data Loss Prevention 9.2.0 McAfee Network Data Loss Prevention 8.6
Not Vulnerable:	McAfee Network Data Loss Prevention 9.3

McAfee Network Data Loss Prevention CVE-2014-8526 Local Information Disclosure Vulnerability

McAfee Network Data Loss Prevention is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

The following versions are vulnerable:

McAfee Network Data Loss Prevention 8.6 and prior
McAfee Network Data Loss Prevention 9.2.0
McAfee Network Data Loss Prevention 9.2.1
McAfee Network Data Loss Prevention 9.2.2

McAfee Network Data Loss Prevention CVE-2014-8526 Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

McAfee Network Data Loss Prevention CVE-2014-8526 Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

McAfee Network Data Loss Prevention CVE-2014-8526 Local Information Disclosure Vulnerability

References:

• Data Loss Prevention Homepage (McAfee)
  
• McAfee Security Bulletin �?? Network Data Loss Prevention addresses 17 security is (McAfee)