CVE-2015-8024

Published: Dec 2, 2015Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username "NGCP|NGCP|NGCP;" and any password.

Affected (7)

Products: Mcafee: Mcafee Enterprise Security Manager

Mcafee

1 product

Mcafee Enterprise Security Manager

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Mcafee Mcafee Enterprise Security Manager	Version 9.3.0
Mcafee Mcafee Enterprise Security Manager	Version 9.3.1
Mcafee Mcafee Enterprise Security Manager	Version 9.3.2
Mcafee Mcafee Enterprise Security Manager	Version 9.4.0
Mcafee Mcafee Enterprise Security Manager	Version 9.4.1
Mcafee Mcafee Enterprise Security Manager	Version 9.4.2
Mcafee Mcafee Enterprise Security Manager	Version 9.5.0