McAfee Network Data Loss Prevention CVE-2014-8528 Local Information Disclosure Vulnerability

Bugtraq ID:	70824
Class:	Design Error
CVE:	CVE-2014-8528
Remote:	No
Local:	Yes
Published:	Oct 03 2014 12:00AM
Updated:	Oct 03 2014 12:00AM
Credit:	Graeme Bell and Jamie Ooi of BAE Systems Detica
Vulnerable:	McAfee Network Data Loss Prevention 9.2.1 McAfee Network Data Loss Prevention 9.2.0 McAfee Network Data Loss Prevention 8.6
Not Vulnerable:	McAfee Network Data Loss Prevention 9.2.2

McAfee Network Data Loss Prevention CVE-2014-8528 Local Information Disclosure Vulnerability

McAfee Network Data Loss Prevention is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

The following versions are vulnerable:

McAfee Network Data Loss Prevention 8.6 and prior
McAfee Network Data Loss Prevention 9.2.0
McAfee Network Data Loss Prevention 9.2.1

McAfee Network Data Loss Prevention CVE-2014-8528 Local Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

McAfee Network Data Loss Prevention CVE-2014-8528 Local Information Disclosure Vulnerability

References:

• Data Loss Prevention Homepage (McAfee)
  
• McAfee Security Bulletin - McAfee Network Data Loss Prevention 9.2.2 update reso (McAfee)