Skip to content

CVE-2017-3965 SB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability

HighCVSS 8.8 EPSS 0.54%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the database via specially crafted URLs.

Affected products

ProductAffected versionsFixed in
mcafee network security manager < 8.2.7.42.2 8.2.7.42.2
mcafee Network Security Management (NSM) >= 8.2, < 8.2.7.42.2 8.2.7.42.2

References