CVE-2017-3962

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

Score

CVSS 3.0 9.8 Critical

Status

Modified - trellixpsirt@trellix.com

Published

2018-06-12

Last modified

2024-08-05

Weaknesses

CWE-916

Affected products

• Network Security Management Nsm (Mcafee)
• Network Security Manager (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10192