Skip to content
OpenAdvisories
Medium · 6.4 CVE-2017-3966 EUVD-2017-13083GHSA-p7mx-frqj-j9hq

SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability

Published Apr 4, 2018 · Updated Sep 16, 2024 · Assigned by trellix

Description

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed session token in the application URL.

Affected products

VendorProductAffectedFixed
McAfee Network Security Management (NSM) 8.2 – < 8.2.7.42.2 8.2.7.42.2

References