CVE-2014-8529

McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://kc.mcafee.com/corporate/index?page=content&id=SB10053	Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10053	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mcafee:network_data_loss_prevention::::::::
	cpe:2.3:a:mcafee:network_data_loss_prevention:8.6:::::::*
	cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.0:::::::*
	cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.1:::::::*

History

21 Nov 2024, 02:19

Type	Values Removed	Values Added
References	~~() https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - Vendor Advisory~~	() https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - Vendor Advisory

Information

Published : 2014-10-29 14:55

Updated : 2024-11-21 02:19

NVD link : CVE-2014-8529

Mitre link : CVE-2014-8529

CVE.ORG link : CVE-2014-8529

JSON object : View

Products Affected

mcafee

network_data_loss_prevention

CWE

CWE-310

Cryptographic Issues

{"id": "CVE-2014-8529", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-10-29T14:55:04.830", "references": [{"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10053", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10053", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-310"}]}], "descriptions": [{"lang": "en", "value": "McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors."}, {"lang": "es", "value": "McAfee Network Data Loss Prevention (NDLP) anterior a 9.3 almacena la clave SSH en texto plano, lo que permite a usuarios locales obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T02:19:15.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09CA37FD-D7C3-4F6C-9E3F-915135824C9D", "versionEndIncluding": "9.2.2"}, {"criteria": "cpe:2.3:a:mcafee:network_data_loss_prevention:8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3561CD5F-BA9C-408A-8291-6DB3E8A77603"}, {"criteria": "cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40679A45-CE96-4F49-B552-8FB5B6AD493F"}, {"criteria": "cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99FB50CA-9C49-4358-8C1F-803CC976408D"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}