CVE-2019-3597

Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.

Score

CVSS 3.0 9.8 Critical

Status

Modified - trellixpsirt@trellix.com

Published

2019-03-26

Last modified

2024-08-04

Affected products

• Network Security Manager (Mcafee)
• Mcafee Network Security Manager Nsm (Mcafee Llc)

References

• http://www.securityfocus.com/bid/107609
• https://kc.mcafee.com/corporate/index?page=content&id=SB10275