← Back

CVE-2019-3606

nvd nist
Published: Mar 26, 2019Modified: Jun 17, 2026

JSON object

Loading...
4.1
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.5 / Impact: 3.6
Source: NVD

Description

Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.

Affected (2)

Mcafee
1 product
Network Security Manager
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Mcafee
Network Security Manager
From 9.1 to 9.1.7.75
Network Security Manager
From 9.2 to 9.2.7.31

Related CWEs

CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (4)

Source: trellixpsirt@trellix.com
Source: trellixpsirt@trellix.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.