CVE-2017-4012: Medium severity Mcafee Network Data Loss Prevention vulnerability
Published May 17, 2017
·Updated
Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticated users to view confidential information via modification of the HTTP request.
Affected Software
1 affected component
Mcafee Network Data Loss Prevention<=9.3.0
Event History
May 17, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-4012?
CVE-2017-4012 is classified as a privilege escalation vulnerability.
2
How do I fix CVE-2017-4012?
To fix CVE-2017-4012, upgrade McAfee Network Data Loss Prevention to version 9.3.1 or higher.
3
Who is affected by CVE-2017-4012?
Remote authenticated users of McAfee Network Data Loss Prevention versions 9.3.0 and below are affected by CVE-2017-4012.
4
What type of attack can exploit CVE-2017-4012?
CVE-2017-4012 can be exploited through modified HTTP requests to gain unauthorized access to confidential information.
5
What systems are vulnerable to CVE-2017-4012?
Systems running McAfee Network Data Loss Prevention version 9.3.0 or earlier are vulnerable to CVE-2017-4012.