CVE-2017-4016

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to exploit and find another hole via HTTP response header.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
McAfee	Network Data Loss Prevention (NDLP)	9.3.x

References

Timeline

Published: May 17, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-40175.3User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view user information via CVE-2017-40284.4Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an admin CVE-2017-40529.8Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthent CVE-2017-40539.8Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticat CVE-2017-40548.8Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticated CVE-2017-40557.5Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote CVE-2017-40578.8Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authentica CVE-2017-48958.8Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploitation of this issue CVE-2017-48963.8Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Succes CVE-2017-48975.5VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this i CVE-2017-48988.8VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DL CVE-2017-48994.7VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An attacker may exploit t