Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2020-7336

Network Security Management (NSM) - Cross Site Request Forgery vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
trellix

Description

Cross Site Request Forgery vulnerability in McAfee Network Security Management (NSM) prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55 may allow an attacker to change the configuration of the Network Security Manager via a carefully crafted HTTP request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

McAfee Network Security Management (NSM)

  • NSM 10.x to < 10.1.7.35affected
  • NSM 9.x to < 9.2.9.55affected

References