CVE-2014-8528
McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users...
CVE-2014-8528 is a low vulnerability (CVSS 2.1) in Mcafee Network Data Loss Prevention, published October 29, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. No source names a fixed version.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.32%EPSS, 25th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log.
Exploit likelihood
Affected products
What each source reports
NVD Score used
McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log.
- Record
CVE-2014-8528- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log.
- Record
CVE-2014-8528- Updated
- 2026-11-02
EUVDEUVD-2014-8365No score
McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log.
- Record
EUVD-2014-8365- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g6wm-64qp-58jrNo score
McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users...
McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log.
- Record
GHSA-g6wm-64qp-58jr- Weakness
- CWE-200
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.