CVE-2017-3962 MEDIUM

CVE-2017-3962: McAfee Network Security Management (NSM) - Password recovery exploitation vulnerability

Vendor Mcafee
Product Network Security Management (NSM)
Published June 12, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

5.6/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

Key dates

02Disclosure timeline

June 12, 2018 CVE published
August 5, 2024 Record updated