CVE-2020-7284CWE-200

Network Security Management (NSM) - Exposure of Sensitive Information

High · published July 3, 2020

CVSS v3.1
8.6
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2020-07-03T18:40Z
EPSS history
Timeline
  • 03 JUL 18:40Z
    Network Security Management (NSM) - Exposure of Sensitive Information
    cvelistv5