CVE-2019-3606
Data leakage when in an MDR pair by McAfee Network Security Manager 9.x
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Mar 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Affected products
McAfee LLC · McAfee Network Security Manager (NSM)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →