PT-2018-7320 · Mcafee · Mcafee Network Security Management

Publicado

2018-04-04

·

Atualizado

2019-10-09

·

CVE-2017-3971

CVSS v3.1

8.2

Alta

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions: McAfee Network Security Management (NSM) versions prior to 8.2.7.42.2
Description: A cryptanalysis vulnerability exists in the web interface due to the insecure use of RC4 encryption ciphers, allowing attackers to view confidential information.
Recommendations: For versions prior to 8.2.7.42.2, update to version 8.2.7.42.2 or later to resolve the issue.

Correção

Inadequate Encryption Strength

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-326

Identificadores relacionados

CVE-2017-3971

Produtos afetados

Mcafee Network Security Management