NetSight
medium5.6

CVE-2017-3962

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.…

Impact

Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

Affected products

VendorProductAffected versions
McafeeNetwork Security Manager
before 8.2.7.42.2

Weakness classification

References