Skip to content
OpenAdvisories
High · 7.5 CVE-2017-3968 EUVD-2017-13085GHSA-wp6v-87jv-h5gr

McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability

Published Jun 13, 2018 · Updated Aug 5, 2024 · Assigned by trellix

Vendor: McAfee Product: Network Data Loss Prevention (NDLP) Product: Network Security Management (NSM)

Description

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.

Affected products

VendorProductAffectedFixed
McAfee Network Security Management (NSM) 8 – < 8.2.7.42.2 8.2.7.42.2
McAfee Network Data Loss Prevention (NDLP) 9.3 – < 9.3.4.1.5 Hotfix 1201697_47868 9.3.4.1.5 Hotfix 1201697_47868

References