Back to search
CVE-2017-3934
Published: Oct 31, 2017
Modified: Sep 16, 2024
PUBLISHED
Description
Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver.
| Vendor | Product | Versions |
|---|---|---|
McAfee | Network Data Loss Prevention | affected 9.3.X |
References
https://kc.mcafee.com/corporate/index?page=content&id=SB10198
x_refsource_CONFIRM
101695
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now