CVE-2014-8531: Medium severity mcafee network data loss prevention vulnerability
Published Oct 29, 2014
·Updated
The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors.
Affected Software
4 affected components
Mcafee Network Data Loss Prevention<=9.2.2
Mcafee Network Data Loss Prevention=8.6
Mcafee Network Data Loss Prevention=9.2.0
Mcafee Network Data Loss Prevention=9.2.1
Event History
Oct 29, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8531?
CVE-2014-8531 has a high severity level due to its potential allowing remote code execution via weak ciphers.
2
How do I fix CVE-2014-8531?
To mitigate CVE-2014-8531, update McAfee Network Data Loss Prevention to a version after 9.3 that uses stronger cipher algorithms.
3
What versions of McAfee Network Data Loss Prevention are affected by CVE-2014-8531?
CVE-2014-8531 affects McAfee Network Data Loss Prevention versions 8.6 and 9.2.0 to 9.2.2.
4
Can CVE-2014-8531 be exploited remotely?
Yes, CVE-2014-8531 can be exploited by remote authenticated users due to weak cipher algorithms.
5
Is there an official patch for CVE-2014-8531?
Yes, official patches are provided in versions of McAfee Network Data Loss Prevention released after version 9.3.