Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-3597 EUVD-2019-13232GHSA-g6rf-q96g-qx69

Authentication bypass in McAfee Network Security Manager 9.x

Published Mar 26, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Description

Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.

Affected products

VendorProductAffectedFixed
McAfee McAfee Network Security Manager (NSM) 9.1 – < 9.1.7.75.2, 9.2 – < 9.2.7.31 (9.2 Update 2) 9.1.7.75.2

References