Vulnerability in Mcafee Network Data Loss Prevention

CVE-2014-8531

The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.019 (78.5th percentile) — read the EPSS interpretation.

Affected products

Mcafee Network_data_loss_prevention — versions 8.6, 9.2.0, 9.2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)