First published: Wed Oct 29 2014(Updated: )
McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
McAfee Network Data Loss Prevention | <=9.2.2 | |
McAfee Network Data Loss Prevention | =8.6 | |
McAfee Network Data Loss Prevention | =9.2.0 | |
McAfee Network Data Loss Prevention | =9.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-8529 is considered a high severity vulnerability due to the exposure of sensitive SSH keys in cleartext.
To fix CVE-2014-8529, upgrade to McAfee Network Data Loss Prevention version 9.3 or above.
CVE-2014-8529 affects McAfee Network Data Loss Prevention versions 8.6 and all versions before 9.3.
CVE-2014-8529 can allow local users to access sensitive information, potentially leading to data breaches.
Additional information about CVE-2014-8529 can be found in the McAfee documentation related to this vulnerability.