Lucene search

TrellixCVE-2017-3971

HistoryApr 04, 2018 - 1:29 p.m.

CVE-2017-3971

2018-04-0413:29:00

CWE-326

trellix

web.nvd.nist.gov

cve-2017-3971

cryptanalysis

vulnerability

mcafee

nsm

web interface

encryption

rc4

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

25.8%

JSON

Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to view confidential information via insecure use of RC4 encryption cyphers.

Affected configurations

Nvd

Node

mcafeenetwork_security_managerRange<8.2.7.42.2

VendorProductVersionCPE
mcafeenetwork_security_manager*cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	network_security_manager	*	cpe:2.3:a:mcafee:network_security_manager::::::::

CNA Affected

[
  {
    "product": "Network Security Management (NSM)",
    "vendor": "McAfee",
    "versions": [
      {
        "lessThan": "8.2.7.42.2",
        "status": "affected",
        "version": "8.2",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10192

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

25.8%

JSON

Related for CVE-2017-3971