Skip to content

CVE-2017-3966 SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability

MediumCVSS 6.3 EPSS 0.67%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed session token in the application URL.

Affected products

ProductAffected versionsFixed in
mcafee network security manager < 8.2.7.42.2 8.2.7.42.2
mcafee Network Security Management (NSM) >= 8.2, < 8.2.7.42.2 8.2.7.42.2

References