CVE-2017-3960 — Network Security Management vulnerability

3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.1%
top 65.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mcafee Network Security ManagementMcafee Network Security Manager
Timeline
PublishedJun 12
Latest updateMay 13

Description

Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5mcafee/network_security_management8 — 8.2.7.42.2

🔴Vulnerability Details

1
GHSA
GHSA-hg2w-8j4g-3rj2: Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8↗2022-05-13
▶

💥Exploits & PoCs

1
Exploit-DB
Adobe (Multiple Products) - XML Injection File Content Disclosure↗2017-04-07
▶