CVE-2014-8529: Low severity Mcafee Network Data Loss Prevention vulnerability
Published Oct 29, 2014
·Updated
McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors.
Affected Software
4 affected components
Mcafee Network Data Loss Prevention<=9.2.2
Mcafee Network Data Loss Prevention=8.6
Mcafee Network Data Loss Prevention=9.2.0
Mcafee Network Data Loss Prevention=9.2.1
Event History
Oct 29, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8529?
CVE-2014-8529 is considered a high severity vulnerability due to the exposure of sensitive SSH keys in cleartext.
2
How do I fix CVE-2014-8529?
To fix CVE-2014-8529, upgrade to McAfee Network Data Loss Prevention version 9.3 or above.
3
What versions of McAfee Network Data Loss Prevention are affected by CVE-2014-8529?
CVE-2014-8529 affects McAfee Network Data Loss Prevention versions 8.6 and all versions before 9.3.
4
How can CVE-2014-8529 impact my organization?
CVE-2014-8529 can allow local users to access sensitive information, potentially leading to data breaches.
5
Where can I find more information about CVE-2014-8529?
Additional information about CVE-2014-8529 can be found in the McAfee documentation related to this vulnerability.