CVE-2019-3597 Authentication bypass in McAfee Network Security Manager 9.x
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee network security manager | >= 9.1, < 9.1.7.75 | 9.1.7.75 |
| mcafee network security manager | >= 9.2, < 9.2.7.31 | 9.2.7.31 |
| McAfee Network Security Manager (NSM) | >= 9.1, < 9.1.7.75.2 | 9.1.7.75.2 |
| McAfee Network Security Manager (NSM) | >= 9.2, < 9.2.7.31 (9.2 Update 2) | 9.2.7.31 (9.2 Update 2) |
References
- 107609 vdb-entry
- kc.mcafee.com