CVE-2014-8524

M

cAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to obtain sensitive information via unspecified vectors.

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:network_data_loss_prevention:8.6:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.0:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.1:*:*:*:*:*:*:*

History

21 Nov 2024, 02:19

Type Values Removed Values Added
References () https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - Vendor Advisory () https://kc.mcafee.com/corporate/index?page=content&id=SB10053 - Vendor Advisory

Information

Published : 2014-10-29 14:55

Updated : 2025-04-12 10:46


NVD link : CVE-2014-8524

Mitre link : CVE-2014-8524

CVE.ORG link : CVE-2014-8524


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor