Skip to content
OpenAdvisories
Unscored CVE-2017-3934 EUVD-2017-13051GHSA-cvc2-4jr8-vm5h

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x al…

Published Oct 31, 2017 · Updated Sep 16, 2024 · Assigned by intel

Description

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver.

Affected products

VendorProductAffectedFixed
McAfee Network Data Loss Prevention 9.3.X —

References