CVE-2014-1473 Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of user...
MediumCVSS 6.8
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee vulnerability manager | <= 7.5.5 | No fix listed |
| mcafee vulnerability manager | = 7.0.11 | No fix listed |
| mcafee vulnerability manager | = 7.5.4 | No fix listed |
References
- 101939 vdb-entry
- 56394 third-party-advisory vendor-advisory
- 64795 vdb-entry
- 1029591 vdb-entry
- mcafee-vm-unspec-csrf(90245) vdb-entry
- kc.mcafee.com vendor-advisory