CVE-2017-3965: SB10192 - Network Security Management (NSM) - Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability
Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the database via specially crafted URLs.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-3965?
CVE-2017-3965 is a Cross-Site Request Forgery (CSRF) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2.
What is the severity of CVE-2017-3965?
The severity of CVE-2017-3965 is rated as high with a severity value of 8.8.
How does CVE-2017-3965 impact McAfee Network Security Manager?
CVE-2017-3965 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the database via specially crafted requests.
Which version of McAfee Network Security Manager is affected by CVE-2017-3965?
McAfee Network Security Manager versions before 8.2.7.42.2 are affected by CVE-2017-3965.
How can I fix CVE-2017-3965?
To fix CVE-2017-3965, it is recommended to upgrade McAfee Network Security Manager to version 8.2.7.42.2 or newer.