CVE-2020-7336

McAfee Network Security Manager (NSM) is affected by CVE-2020-7336, a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to change NSM configuration via a crafted HTTP request. Affected versions are NSM prior to 10.1.7.35 and NSM 9.x prior to 9.2.9.55. If exploited, the ...

CVE-2020-7284

McAfee Network Security Management (NSM) prior to 10.1.7.7 is affected by CVE-2020-7284: a local attacker can exploit a command-line interface weakness to access the root account by issuing crafted commands from the restricted CLI, leading to a complete confidentiality, integrity, and availabilit...