CVE-2014-8528

Published: Oct 29, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log.

Affected (4)

Products: Mcafee: Network Data Loss Prevention

Mcafee

1 product

Network Data Loss Prevention

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mcafee Network Data Loss Prevention	Up to 9.2.2
Mcafee Network Data Loss Prevention	Version 8.6
Mcafee Network Data Loss Prevention	Version 9.2.0
Mcafee Network Data Loss Prevention	Version 9.2.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: cve@mitre.org

Vendor Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10053

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.