CVE-2019-3606

Data leakage when in an MDR pair by McAfee Network Security Manager 9.x

High · published March 26, 2019

CVSS v3.0
7.7
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.

The record
Technical detail
CVSS v3.0
7.7 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Published
2019-03-26T17:23Z
EPSS history
Timeline
  • 26 MAR 17:23Z
    Data leakage when in an MDR pair by McAfee Network Security Manager 9.x
    cvelistv5