CVE-2017-3966 - SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability · CoreCVE

Back Back to CVE browser

MEDIUM

SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability

Published Apr 4, 2018

6.4

MEDIUM

CVSS 3.0

EPSS 0.67%

Description

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed session token in the application URL.

Affected products

Vendor McAfee Product Network Security Management (NSM) Default
unknown
Affected
- ≥ 8.2, < 8.2.7.42.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
McAfee	Network Security Management (NSM)	unknown	Affected ≥ 8.2, < 8.2.7.42.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-613

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-13083
Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10192
x_refsource_CONFIRM

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-13083		Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10192		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Apr 4, 2018

Updated Sep 16, 2024

Reserved Dec 26, 2016

Link CVE-2017-3966

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-3966

Red Hat

No data

ENISA EUVD

Assigner trellix

Published Apr 4, 2018

Updated Sep 16, 2024

Link EUVD-2017-13083

GitHub

No data