PT-2017-16174
CVE-2017-4011
·
تاريخ النشر
2017-05-17
·
تاريخ التحديث
2017-07-08
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
McAfee Network Data Loss Prevention (NDLP) versions 9.3.x
Description
The issue allows remote attackers to obtain session or cookie information by modifying the HTTP request, which can lead to unauthorized access. This is due to an Embedding Script (XSS) in HTTP Headers vulnerability in the server.
Recommendations
For McAfee Network Data Loss Prevention (NDLP) versions 9.3.x, consider restricting access to sensitive information and session cookies until a fix is available. As a temporary workaround, review and limit the modification of HTTP requests to prevent exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾