Information disclosure in Mcafee Host Data Loss Prevention

CVE-2009-5117

The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files.

Vulnerability class: Information Disclosure

EPSS: 0.003 (21.7th percentile) — read the EPSS interpretation.

Affected products

Mcafee Host_data_loss_prevention — versions 3.0.100.6, 9.0.0.416
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)