Lucene search

PRIOn knowledge basePRION:CVE-2015-8024

HistoryDec 02, 2015 - 4:59 p.m.

Authentication flaw

2015-12-0216:59:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.1%

JSON

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username “NGCP|NGCP|NGCP;” and any password.

CPENameOperatorVersion
mcafee_enterprise_security_managereq9.4.0
mcafee_enterprise_security_managereq9.3.0
mcafee_enterprise_security_managereq9.5.0
mcafee_enterprise_security_managereq9.3.2
mcafee_enterprise_security_managereq9.4.1
mcafee_enterprise_security_managereq9.4.2
mcafee_enterprise_security_managereq9.3.1

Name	Operator	Version
mcafee_enterprise_security_manager	eq	9.4.0
mcafee_enterprise_security_manager	eq	9.3.0
mcafee_enterprise_security_manager	eq	9.5.0
mcafee_enterprise_security_manager	eq	9.3.2
mcafee_enterprise_security_manager	eq	9.4.1
mcafee_enterprise_security_manager	eq	9.4.2
mcafee_enterprise_security_manager	eq	9.3.1

References

www.quantumleap.it/mcafee-siem-esm-esmrec-and-esmlm-authentication-bypass-vulnerability/

www.securitytracker.com/id/1034288

kc.mcafee.com/corporate/index?page=content&id=SB10137

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.1%

JSON

Related for PRION:CVE-2015-8024