CVE-2017-3968high

CVE-2017-3968: falha de alta gravidade em McAfee Network Security Management (NSM)

McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Network Security Management+ Monitorar Network Data Loss Prevention

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.5%
Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L
Produtos afetados
McAfee · Network Data Loss Prevention (NDLP)McAfee · Network Security Management (NSM)
CVEs relacionadas — McAfee Network Security Management (NSM)

No mesmo produto, das mais perigosas para as menos.

CVE-2017-4011—CVE-2017-4011EPSS 3.3%CVE-2017-3972HIGHSB10192 - Network Security Management (NSM) - Infrastructure-based foot printing vulnerabilityEPSS 1.5%CVE-2017-4012—CVE-2017-4012EPSS 1.3%CVE-2017-4015—CVE-2017-4015EPSS 1.2%CVE-2017-4013—CVE-2017-4013EPSS 1.0%CVE-2017-4017—CVE-2017-4017EPSS 1.0%