CVE-2014-8524

Published: Oct 29, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected (4)

Products: Mcafee: Network Data Loss Prevention

Mcafee

1 product

Network Data Loss Prevention

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mcafee Network Data Loss Prevention	Up to 9.2.2
Mcafee Network Data Loss Prevention	Version 8.6
Mcafee Network Data Loss Prevention	Version 9.2.0
Mcafee Network Data Loss Prevention	Version 9.2.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: cve@mitre.org

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.