PT-2019-16633 · Mcafee · Mcafee Network Security Management

Published 2019-03-26 · Updated 2020-08-24 · CVE-2019-3597

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Network Security Manager (NSM) versions 9.1 through 9.1.7.75.1 McAfee Network Security Manager (NSM) versions 9.2 through 9.2.7.30

Description The issue allows unauthenticated users to gain administrator rights due to incorrect handling of expired GUI sessions.

Recommendations For versions 9.1 through 9.1.7.75.1, update to version 9.1.7.75.2 or later. For versions 9.2 through 9.2.7.30, update to 9.2 Update 2 or later.

Fix

Related Identifiers

CVE-2019-3597

Affected Products

Mcafee Network Security Management

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-3597 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3597 · Vendor Advisory
• https://kc.mcafee.com/corporate/index?page=content&id=SB10275 · Note
• http://securityfocus.com/bid/107609 · Note