CVE-2017-3968 McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability
CriticalCVSS 9.1
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee network data loss prevention | < 9.3.4.1.5 | 9.3.4.1.5 |
| mcafee network security manager | < 8.2.7.42.2 | 8.2.7.42.2 |
| mcafee Network Security Management (NSM) | >= 8, < 8.2.7.42.2 | 8.2.7.42.2 |
| mcafee Network Data Loss Prevention (NDLP) | >= 9.3, < 9.3.4.1.5 Hotfix 1201697_47868 | 9.3.4.1.5 Hotfix 1201697_47868 |