CVE-2017-3968: McAfee Network Security Management (NSM) and Network Data Loss Prevention (NDLP)- Password recovery exploitation vulnerability

Severity: critical (CVSS 9.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-13 · updated 2026-06-17
Weakness: CWE-384

Description

Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfee Network Data Loss Prevention (NDLP) before 9.3.4.1.5 allows remote attackers to disclose sensitive information or manipulate the database via a crafted authentication cookie.

Affected products

McAfee Network Data Loss Prevention (NDLP): before 9.3.4.1.5 — fixed in 9.3.4.1.5
McAfee Network Security Management (NSM): before 8.2.7.42.2 — fixed in 8.2.7.42.2

How to fix

Upgrade to a fixed version: McAfee Network Data Loss Prevention (NDLP) 9.3.4.1.5; McAfee Network Security Management (NSM) 8.2.7.42.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-3968 or the next vulnerability affects your stack