CVE-2014-8522

Published: Oct 29, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The MySQL database in McAfee Network Data Loss Prevention (NDLP) before 9.3 does not require a password, which makes it easier for remote attackers to obtain access.

Affected (4)

Products: Mcafee: Network Data Loss Prevention

Mcafee

1 product

Network Data Loss Prevention

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mcafee Network Data Loss Prevention	Up to 9.2.2
Mcafee Network Data Loss Prevention	Version 8.6
Mcafee Network Data Loss Prevention	Version 9.2.0
Mcafee Network Data Loss Prevention	Version 9.2.1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: cve@mitre.org

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.