CVE-2014-8525 in Network Data Loss Prevention

Resumen (Inglés)

McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2014-10-29

Divulgación

2014-10-29

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
68088	McAfee Network Data Loss Prevention HTTP Cookie httponly divulgación de información	200	No probado	Arreglo oficial	CVE-2014-8525

Fuentes

• MITRE
• NVD
• CVE Details