Vulnerabilities > CVE-2017-3969 - Channel and Path Errors vulnerability in Mcafee Network Security Manager

CVSS 5.9 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

high complexity

mcafee

CWE-417

NVD

Published: 2018-04-04

Updated: 2023-11-07

Summary

Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows man-in-the-middle attackers to decrypt messages via an inadequate implementation of SSL.

Vulnerable Configurations

Part	Description	Count
Application	Mcafee Mcafee Network Security Manager 6.1.15 Mcafee Network Security Manager 6.1.15.38 Mcafee Network Security Manager 6.1.15.39 Mcafee Network Security Manager 7.1.5 Mcafee Network Security Manager 7.1.5.14 Mcafee Network Security Manager 7.1.5.15 Mcafee Network Security Manager 7.1.15 Mcafee Network Security Manager 7.1.15.6 Mcafee Network Security Manager 7.1.15.7 Mcafee Network Security Manager 7.5.5 Mcafee Network Security Manager 7.5.5.8 Mcafee Network Security Manager 7.5.5.9 Mcafee Network Security Manager 8.1.7 Mcafee Network Security Manager 8.1.7.2 Mcafee Network Security Manager 8.1.7.3	15

Common Weakness Enumeration (CWE)

CWE-417 - Channel and Path Errors

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10192