CVE-2017-3965

Published: Apr 4, 2018Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the database via specially crafted URLs.

Affected (1)

Products: Mcafee: Network Security Manager

1 product

Network Security Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Network Security Manager	Before 8.2.7.42.2

Related CWEs

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10192

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10192

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.