CVE-2017-3968high

CVE-2017-3968: high-severity vulnerability in McAfee Network Security Management (NSM)

McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability

Published · Updated

Follow this CVE+ Monitor Network Security Management+ Monitor Network Data Loss Prevention

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.5%
Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L
Affected products
McAfee · Network Data Loss Prevention (NDLP)McAfee · Network Security Management (NSM)
Related CVEs — McAfee Network Security Management (NSM)

In the same product, most dangerous first.

CVE-2017-4011—CVE-2017-4011EPSS 3.3%CVE-2017-3972HIGHSB10192 - Network Security Management (NSM) - Infrastructure-based foot printing vulnerabilityEPSS 1.5%CVE-2017-4012—CVE-2017-4012EPSS 1.3%CVE-2017-4015—CVE-2017-4015EPSS 1.2%CVE-2017-4013—CVE-2017-4013EPSS 1.0%CVE-2017-4017—CVE-2017-4017EPSS 1.0%