Description
McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack.
References
- 20050706 Re: Re: McAfee Intrushield IPS Abuse mailing-list
- 1014422 vdb-entry
- 20050706 McAfee Intrushield IPS Abuse mailing-list