Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2019-3597

Authentication bypass in McAfee Network Security Manager 9.x

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee LLC McAfee Network Security Manager (NSM)

  • 9.1 to < 9.1.7.75.2affected
  • 9.2 to < 9.2.7.31 (9.2 Update 2)affected

References