CVE-2014-2390

McAfee Network Security Manager < 6.1.15.39 - Cross-Site Request Forgery in User Management Module

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for requests that modify user accounts via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1030674

Scores

EPSS 0.0011
EPSS Percentile 28.3%

Details

CWE
CWE-352
Status published
Products (1)
mcafee/network_security_manager 6.1.15 - 6.1.15.39
Published Aug 29, 2014
Tracked Since Feb 18, 2026