medium5.9
CVE-2017-3934
Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-midd…
Impact
Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Network Data Loss Prevention | through 9.3.0 |