VULNERABILITY INTELLIGENCE
CVE-2017-3966
CVSS score6.4 MEDIUM
EPSS probability0.67%
CISA KEVNot currently listed
Published2018-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H
Description
Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed session token in the application URL.
Weakness classification
- CWE-613: Insufficient Session Expiration