CVE-2017-3934: McAfee Network Data Loss Prevention

Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days.

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver.

Affected products

• McAfee Network Data Loss Prevention: up to and including 9.3.0

Published 2017-10-31. Last modified 2026-06-17.