Vulnerabilities > CVE-2005-2188 - Remote Security vulnerability in IntruShield Security Management System

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
mcafee

Summary

McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack.

Vulnerable Configurations

Part Description Count
Hardware
Mcafee
1