Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a users browser via reusing the exposed session token in the application URL.
Weakness
According to WASC, “Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.”
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Network_security_manager | Mcafee | * | 8.2.7.42.2 (excluding) |
Potential Mitigations
References
- https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10192
- https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10192