CVE-2009-5117
Published Aug 22, 2012
Last updated 7 years ago
Overview
- Description
- The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 1.9
- Impact score
- 2.9
- Exploitability score
- 3.4
- Vector string
- AV:L/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mcafee:host_data_loss_prevention:3.0.100.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D694D73D-B5A2-4A38-AA9E-4A464947CA81"
},
{
"criteria": "cpe:2.3:a:mcafee:host_data_loss_prevention:9.0.0.416:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE267883-1753-47AB-8750-2BFC3151ADC2"
}
],
"operator": "OR"
}
]
}
]