Skip to content
OpenAdvisories
Medium · 5.6 CVE-2017-3962 EUVD-2017-13079GHSA-r8g7-cpmm-qmhp

McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability

Published Jun 12, 2018 · Updated Aug 5, 2024 · Assigned by trellix

Description

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

Affected products

VendorProductAffectedFixed
McAfee Network Security Management (NSM) 8 – < 8.2.7.42.2 8.2.7.42.2

References