CVE-2017-3960: McAfee Network Security Management (NSM) - Exploitation of Authorization vulnerability
Published Jun 12, 2018
·Updated
Exploitation of Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows authenticated users to gain elevated privileges via a crafted HTTP request parameter.
Affected Software
1 affected component
McAfee Network Security Manager<8.2.7.42.2
Event History
Jun 12, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2017-3960?
CVE-2017-3960 is an Authorization vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2.
2
How does CVE-2017-3960 work?
CVE-2017-3960 allows authenticated users to gain elevated privileges by sending a crafted HTTP request parameter.
3
What is the severity of CVE-2017-3960?
CVE-2017-3960 has a severity rating of 8.8 (high).
4
Which version of McAfee Network Security Manager is affected by CVE-2017-3960?
McAfee Network Security Manager before version 8.2.7.42.2 is affected by CVE-2017-3960.
5
How can I fix CVE-2017-3960?
To fix CVE-2017-3960, upgrade to McAfee Network Security Manager version 8.2.7.42.2 or later.