Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 < 9.1.7.75 (Update 4) and 9.2 < 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Network_security_manager | Mcafee | 9.1 (including) | 9.1.7.75 (excluding) |
| Network_security_manager | Mcafee | 9.2 (including) | 9.2.7.31 (excluding) |