What is CVE-2017-4016?

CVE-2017-4016 is a medium-severity vulnerability in Mcafee Network_data_loss_prevention, classified under Information Disclosure. CVSS score: 5.3/10. Published 2017-05-17.

How severe is CVE-2017-4016?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Mcafee Network_data_loss_prevention

CVE-2017-4016

Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header.

Vulnerability class: Information Disclosure

EPSS: 0.010 (60.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Mcafee Network_data_loss_prevention
Mcafee Network Data Loss Prevention (Ndlp) — versions 9.3.x

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

secure@intel.com (x_refsource_CONFIRM, Vendor Advisory)
secure@intel.com (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2017-4016?: CVE-2017-4016 is a medium-severity vulnerability in Mcafee Network_data_loss_prevention, classified under Information Disclosure. CVSS score: 5.3/10. Published 2017-05-17.
How severe is CVE-2017-4016?: Medium severity. CVSS v3 base score is 5.3 out of 10.