CVE-2017-3968

McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability

High · published June 13, 2018

CVSS v3.0
7.5
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01497 · 73.9th percentile
Published
2018-06-13T20:00Z
EPSS history
Timeline
  • 13 JUN 20:00Z
    McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability
    cvelistv5