66 matches found
Design/Logic Flaw
Unsalted password vulnerability in the Enterprise Manager web portal component in Intel Security McAfee Vulnerability Manager MVM 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database...
CVE-2015-8989
McAfee Vulnerability Manager (MVM) – Enterprise Manager web portal is affected by CVE-2015-8989. The vulnerability stems from unsalted passwords stored for user accounts, enabling attackers to brute-force passwords against the MVM database. Affected: McAfee Vulnerability Manager prior to version ...
McAfee Vulnerability Manager Enterprise Manager Component Cross-Site Request Forgery Vulnerability
McAfee Vulnerability Manager is a security risk management solution from McAfee USA. A cross-site request forgery vulnerability exists in the Organizations and Remediation administration page in the Enterprise Manager component of McAfee Vulnerability Manager, which allows remote attackers to...
CVE-2016-2199
Multiple cross-site request forgery CSRF vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager MVM before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager MVM before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via...
CVE-2016-2199
CVE-2016-2199 describes multiple CSRF vulnerabilities in the McAfee Vulnerability Manager (MVM) Enterprise Manager component, specifically on the Organizations and Remediation management page. The issues allow remote attackers to hijack administrator sessions for requests via unknown vectors, aff...
CVE-2016-2199
Multiple cross-site request forgery CSRF vulnerabilities in the Organizations and Remediation management page in Enterprise Manager in McAfee Vulnerability Manager MVM before 7.5.10 allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IBM Security QRadar Vulnerability Manager 7.2.x before 7.2.5 Patch 5 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...
CVE-2015-1997
IBM QRadar Vulnerability Manager (QRadar QVM) 7.2.x
McAfee Vulnerability Manager Multiple CSRF Vulnerabilities
McAfee Vulnerability Manager is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
McAfee Vulnerability Manager 'Organizations' Cross-Site Request Forgery Vulnerability
McAfee Vulnerability Manager is a vulnerability management application. A cross-site request forgery vulnerability exists on the McAfee Vulnerability Manager 'Organizations' page, which allows remote attackers to construct malicious URIs, trick users into parsing them, and can target user context...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via unknown vectors...
CVE-2015-7612
Multiple cross-site request forgery CSRF vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager MVM 7.5.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that have unspecified impact via unknown vectors...
CVE-2015-7612
McAfee Vulnerability Manager (MVM) Enterprise Manager up to version 7.5.9 has CSRF vulnerabilities on the Organizations page. The root cause is cross-site request forgery, enabling remote attackers to hijack administrator authentication for requests with unspecified impact via unknown vectors. Th...
Design/Logic Flaw
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials in URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-serv...
Session fixation
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allows remote attackers to hijack the authentication of arbitrary users for requests th...
CVE-2014-4832
IBM QRadar family (SIEM, Risk Manager, Vulnerability Manager) versions 7.1 MR2 before patch 9 and 7.2 before patch 1, plus 7.2.x before 7.2.4 Patch 1, are affected by CVE-2014-4832. Description: a remote attacker could obtain sensitive cookie information by sniffing unencrypted HTTP traffic durin...
CVE-2014-6075
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, place credentials in URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-serv...
CVE-2014-4831
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to hijack sessions via unspecified vectors...