PT-2015-7571 · Mcafee · Mcafee Vulnerability Manager

Publicado 2015-10-01 · Atualizado 2015-10-02 · CVE-2015-7612

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions McAfee Vulnerability Manager (MVM) versions 7.5.9 and earlier

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in Enterprise Manager. These vulnerabilities allow remote attackers to hijack the authentication of administrators for requests, although the specific impact of these requests is not detailed.

Recommendations For McAfee Vulnerability Manager (MVM) versions 7.5.9 and earlier, update to a version later than 7.5.9 to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-7612

Produtos afetados

Mcafee Vulnerability Manager

Referências · 3

• https://kc.mcafee.com/corporate/index?page=content&id=SB10135 · Aviso do Fabricante
• http://securitytracker.com/id/1033682 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7612 · Nota de Segurança