CVE-2017-3966 Vulnerability Details

  /     /     /  

CVE-2017-3966 Metadata Quick Info

CVE Published: 04/04/2018 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: trellix | Vendor: McAfee | Product: Network Security Management (NSM)
Status : PUBLISHED

---

CVE-2017-3966 Description

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user\'s browser via reusing the exposed session token in the application URL.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Exploitation of session variables, resource IDs and other trusted credentials vulnerability
Source: McAfee

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).