{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-23T22:57:31.955","vulnerabilities":[{"cve":{"id":"CVE-2017-3934","sourceIdentifier":"secure@intel.com","published":"2017-10-31T14:29:00.383","lastModified":"2026-06-17T01:19:10.410","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver."},{"lang":"es","value":"Una vulnerabilidad de falta de información de estado de la seguridad de transporte estricto HTTP en el servidor en versiones 9.3.x de McAfee Network Data Loss Prevention (NDLP) permite que atacantes Man-in-the-Middle (MitM) expongan información confidencial mediante archivos de lectura en el servidor web."}],"affected":[{"source":"secure@intel.com","affectedData":[{"vendor":"McAfee","product":"Network Data Loss Prevention","versions":[{"version":"9.3.X","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":5.9,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*","versionEndIncluding":"9.3.0","matchCriteriaId":"DABB617F-203F-4074-82D2-B975C15221F3"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/101695","source":"secure@intel.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10198","source":"secure@intel.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/101695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}