CVE-2017-3934 — Sensitive Information Exposure in Network Data Loss Prevention

CWE-200 — Sensitive Information Exposure2 documents2 sources
Severity
5.9MEDIUMNVD
EPSS
0.2%
top 51.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mcafee Network Data Loss Prevention
Timeline
PublishedOct 31
Latest updateMay 17

Description

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

1
GHSA
GHSA-cvc2-4jr8-vm5h: Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9↗2022-05-17
▶