CVE-2014-8527: Low severity Mcafee Network Data Loss Prevention vulnerability
Published Oct 29, 2014
·Updated
McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password."
Affected Software
4 affected components
Mcafee Network Data Loss Prevention<=9.2.2
Mcafee Network Data Loss Prevention=8.6
Mcafee Network Data Loss Prevention=9.2.0
Mcafee Network Data Loss Prevention=9.2.1
Event History
Oct 29, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8527?
CVE-2014-8527 is rated as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2014-8527?
To fix CVE-2014-8527, upgrade to McAfee Network Data Loss Prevention version 9.3 or later.
3
What versions of McAfee are affected by CVE-2014-8527?
CVE-2014-8527 affects McAfee Network Data Loss Prevention versions 8.6, 9.2.0, 9.2.1, and 9.2.2.
4
What type of information can be accessed through CVE-2014-8527?
CVE-2014-8527 allows local users to obtain sensitive information related to plaintext passwords.
5
Is there a workaround for CVE-2014-8527?
There are no known workarounds for CVE-2014-8527; the only solution is to upgrade to a patched version.