What is CVE-2017-3968?

CVE-2017-3968 is a high-severity vulnerability in Mcafee Network Data Loss Prevention, classified under Session Fixation. CVSS score: 7.5/10. Published 2018-06-13.

How severe is CVE-2017-3968?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Mcafee Network Data Loss Prevention

CVE-2017-3968

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.

EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L.

Affected products

Mcafee Network_data_loss_prevention
Mcafee Network Data Loss Prevention (Ndlp) — versions 9.3
Mcafee Network Security Management (Nsm) — versions 8
Mcafee Network_security_manager

Weakness classification (CWE)

CWE-384 — Session Fixation

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)
trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2017-3968?: CVE-2017-3968 is a high-severity vulnerability in Mcafee Network Data Loss Prevention, classified under Session Fixation. CVSS score: 7.5/10. Published 2018-06-13.
How severe is CVE-2017-3968?: High severity. CVSS v3 base score is 7.5 out of 10.