PT-2018-7317 · Mcafee · Mcafee Network Security Management

Publicado

2018-04-04

·

Atualizado

2019-10-09

·

CVE-2017-3967

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions: McAfee Network Security Management (NSM) versions prior to 8.2.7.42.2
Description: The issue allows remote attackers to inject arbitrary web script or HTML via application pages due to the inability to break out of 3rd party HTML frames in the web interface.
Recommendations: For versions prior to 8.2.7.42.2, update to version 8.2.7.42.2 or later to resolve the issue.

Correção

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2017-3967

Produtos afetados

Mcafee Network Security Management