What is CVE-2017-3966?

CVE-2017-3966 is a medium-severity vulnerability in Mcafee Network Security Management (Nsm), classified under Insufficient Session Expiration. CVSS score: 6.4/10. Published 2018-04-04.

How severe is CVE-2017-3966?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Vulnerability in Mcafee Network Security Management (Nsm)

CVE-2017-3966

Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via…

EPSS: 0.007 (48.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H.

Affected products

Mcafee Network Security Management (Nsm) — versions 8.2
Mcafee Network_security_manager

Weakness classification (CWE)

CWE-613 — Insufficient Session Expiration

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2017-3966?: CVE-2017-3966 is a medium-severity vulnerability in Mcafee Network Security Management (Nsm), classified under Insufficient Session Expiration. CVSS score: 6.4/10. Published 2018-04-04.
How severe is CVE-2017-3966?: Medium severity. CVSS v3 base score is 6.4 out of 10.