CVE-2015-8024

2015-12-0216:59:00

CWE-78

[email protected]

web.nvd.nist.gov

mcafee

esm

esmlm

esmrec

cve-2015-8024

security vulnerability

authentication bypass

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.6%

JSON

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username “NGCP|NGCP|NGCP;” and any password.

Affected configurations

NVD

Node

mcafeemcafee_enterprise_security_managerMatch9.3.0

mcafeemcafee_enterprise_security_managerMatch9.3.1

mcafeemcafee_enterprise_security_managerMatch9.3.2

mcafeemcafee_enterprise_security_managerMatch9.4.0

mcafeemcafee_enterprise_security_managerMatch9.4.1

mcafeemcafee_enterprise_security_managerMatch9.4.2

mcafeemcafee_enterprise_security_managerMatch9.5.0

CPENameOperatorVersion
mcafee:mcafee_enterprise_security_managermcafee mcafee enterprise security managereq9.3.0
mcafee:mcafee_enterprise_security_managermcafee mcafee enterprise security managereq9.3.1
mcafee:mcafee_enterprise_security_managermcafee mcafee enterprise security managereq9.3.2
mcafee:mcafee_enterprise_security_managermcafee mcafee enterprise security managereq9.4.0
mcafee:mcafee_enterprise_security_managermcafee mcafee enterprise security managereq9.4.1
mcafee:mcafee_enterprise_security_managermcafee mcafee enterprise security managereq9.4.2
mcafee:mcafee_enterprise_security_managermcafee mcafee enterprise security managereq9.5.0

CPE	Name	Operator	Version
mcafee:mcafee_enterprise_security_manager	mcafee mcafee enterprise security manager	eq	9.3.0
mcafee:mcafee_enterprise_security_manager	mcafee mcafee enterprise security manager	eq	9.3.1
mcafee:mcafee_enterprise_security_manager	mcafee mcafee enterprise security manager	eq	9.3.2
mcafee:mcafee_enterprise_security_manager	mcafee mcafee enterprise security manager	eq	9.4.0
mcafee:mcafee_enterprise_security_manager	mcafee mcafee enterprise security manager	eq	9.4.1
mcafee:mcafee_enterprise_security_manager	mcafee mcafee enterprise security manager	eq	9.4.2
mcafee:mcafee_enterprise_security_manager	mcafee mcafee enterprise security manager	eq	9.5.0