CVE-2020-7284 - Network Security Management (NSM) - Exposure of Sensitive Information · CoreCVE

Back Back to CVE browser

HIGH

Network Security Management (NSM) - Exposure of Sensitive Information

Published Jul 3, 2020

8.6

HIGH

CVSS 3.1

EPSS 0.37%

Description

Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).

Affected products

Vendor McAfee Product Network Security Management (NSM) Default
unknown
Affected
- ≥ unspecified, < 10.1.7.7

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
McAfee	Network Security Management (NSM)	unknown	Affected ≥ unspecified, < 10.1.7.7

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28411
Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10322
x_refsource_MISC

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28411		Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10322		x_refsource_MISC

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Jul 3, 2020

Updated Aug 4, 2024

Reserved Jan 21, 2020

Link CVE-2020-7284

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7284

Red Hat

No data

ENISA EUVD

Assigner trellix

Published Jul 3, 2020

Updated Aug 4, 2024

Link EUVD-2020-28411

GitHub

No data