CVE-2014-8525

Published: Oct 29, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

Affected (4)

Products: Mcafee: Network Data Loss Prevention

Mcafee

1 product

Network Data Loss Prevention

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mcafee Network Data Loss Prevention	Up to 9.2.2
Mcafee Network Data Loss Prevention	Version 8.6
Mcafee Network Data Loss Prevention	Version 9.2.0
Mcafee Network Data Loss Prevention	Version 9.2.1