PT-2018-7318 · Mcafee · Mcafee Network Data Loss Prevention+1

Publicado 2018-06-13 · Atualizado 2019-10-09 · CVE-2017-3968

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: McAfee Network Security Manager (NSM) versions prior to 8.2.7.42.2 McAfee Network Data Loss Prevention (NDLP) versions prior to 9.3.4.1.5

Description: A session fixation issue in the web interface allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.

Recommendations: For McAfee Network Security Manager (NSM) versions prior to 8.2.7.42.2, update to version 8.2.7.42.2 or later. For McAfee Network Data Loss Prevention (NDLP) versions prior to 9.3.4.1.5, update to version 9.3.4.1.5 or later.

Correção

Session Fixation

Enumeração de Fraquezas

CWE-384

Identificadores relacionados

CVE-2017-3968

Produtos afetados

Mcafee Network Data Loss Prevention

Mcafee Network Security Management

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-3968 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10192 · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10198 · Nota
• https://osv.dev/vulnerability/CVE-2017-3968 · Aviso do Fabricante