Beveiligingsadvies

CVE-2017-3965

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-04-04 13:00:00
Laatst bijgewerkt 2024-09-16 16:38:11
Toegewezen door trellix
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to perform unauthorized tasks such as retrieving internal system information or manipulating the database via specially crafted URLs.