CVE-2015-8024

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-12-02 · updated 2026-06-17
Weakness: CWE-78

Description

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username "NGCP|NGCP|NGCP;" and any password.

Affected products

Mcafee Enterprise Security Manager: 9.3.0, 9.3.1, 9.3.2, 9.4.0, 9.4.1, 9.4.2 (+1)

References

http://www.quantumleap.it/mcafee-siem-esm-esmrec-and-esmlm-authentication-bypass-vulnerability/
http://www.securitytracker.com/id/1034288
https://kc.mcafee.com/corporate/index?page=content&id=SB10137
http://www.quantumleap.it/mcafee-siem-esm-esmrec-and-esmlm-authentication-bypass-vulnerability/
http://www.securitytracker.com/id/1034288
https://kc.mcafee.com/corporate/index?page=content&id=SB10137

Get alerted when CVE-2015-8024 or the next vulnerability affects your stack