CVE-2017-4017

MEDIUM

McAfee Network Data Loss Prevention < 9.3.0 - User Name Disclosure via Appliance Web Interface

Title source: llm
STIX 2.1

Description

User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via the appliance web interface.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038523

Scores

CVSS v3 5.3
EPSS 0.0021
EPSS Percentile 43.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
McAfee/Network Data Loss Prevention (NDLP) 9.3.x
mcafee/network_data_loss_prevention < 9.3.0
Published May 17, 2017
Tracked Since Feb 18, 2026