First published: Wed Oct 29 2014(Updated: )
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
McAfee Network Data Loss Prevention | <=9.2.2 | |
McAfee Network Data Loss Prevention | =8.6 | |
McAfee Network Data Loss Prevention | =9.2.0 | |
McAfee Network Data Loss Prevention | =9.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-8527 is rated as a medium severity vulnerability due to its potential to expose sensitive information.
To fix CVE-2014-8527, upgrade to McAfee Network Data Loss Prevention version 9.3 or later.
CVE-2014-8527 affects McAfee Network Data Loss Prevention versions 8.6, 9.2.0, 9.2.1, and 9.2.2.
CVE-2014-8527 allows local users to obtain sensitive information related to plaintext passwords.
There are no known workarounds for CVE-2014-8527; the only solution is to upgrade to a patched version.