Skip to content
OpenAdvisories
Medium · 6.6 CVE-2020-7336 EUVD-2020-28463GHSA-45jg-4c4q-8q3w

Network Security Management (NSM) - Cross Site Request Forgery vulnerability

Published Jan 5, 2021 · Updated Aug 4, 2024 · Assigned by trellix

Description

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.

Affected products

VendorProductAffectedFixed
McAfee Network Security Management (NSM) NSM 10.x – < 10.1.7.35, NSM 9.x – < 9.2.9.55 10.1.7.35

References