CVE-2015-8989

Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database.

Score

CVSS 3.0 8.8 High

Status

Modified - secure@intel.com

Published

2017-03-14

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Mcafee Vulnerability Manager Mvm (Intel)
• Vulnerability Manager (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10117