CVE-2017-4016: Infoleak
Published May 17, 2017
·Updated
Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header.
Affected Software
1 affected component
Mcafee Network Data Loss Prevention<=9.3.0
Event History
May 17, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-4016?
CVE-2017-4016 is classified as a medium severity vulnerability.
2
How do I fix CVE-2017-4016?
To fix CVE-2017-4016, upgrade McAfee Network Data Loss Prevention to version 9.3.1 or later.
3
What type of attack does CVE-2017-4016 enable?
CVE-2017-4016 allows remote attackers to exploit method disclosure through an HTTP response header.
4
Which versions of McAfee Network Data Loss Prevention are affected by CVE-2017-4016?
CVE-2017-4016 affects McAfee Network Data Loss Prevention version 9.3.0 and earlier.
5
Is CVE-2017-4016 a remote attack vulnerability?
Yes, CVE-2017-4016 can be exploited remotely by attackers.