CVE-2017-3966
SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability
Medium · published April 4, 2018
What it is
Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed session token in the application URL.
The record
Technical detail
- CVSS v3.0
- 6.4 · MEDIUM
- Vector
- CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00672 · 51.2th percentile
- Published
- 2018-04-04T13:00Z
EPSS history
Timeline