CVE-2017-3962

McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability

Medium · published June 12, 2018

CVSS v3.0
5.6
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

The record
Technical detail
CVSS v3.0
5.6 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00352 · 27.7th percentile
Published
2018-06-12T14:00Z
EPSS history
Timeline
  • 12 JUN 14:00Z
    McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability
    cvelistv5