PT-2018-7321 · Mcafee · Mcafee Network Security Management

Publicado

2018-04-03

·

Atualizado

2019-10-09

·

CVE-2017-3972

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: McAfee Network Security Management (NSM) versions prior to 8.2.7.42.2
Description: A vulnerability in the web interface of McAfee Network Security Management (NSM) allows attackers to execute arbitrary code. This is due to the server banner leaking potentially sensitive or security-relevant information.
Recommendations: For versions prior to 8.2.7.42.2, update to version 8.2.7.42.2 or later to resolve the issue.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-3972

Produtos afetados

Mcafee Network Security Management