NVD

Id
30816  
Name
CVE-2014-2390  
Description
Cross-site request forgery (CSRF) vulnerability in the User Management module in McAfee Network Security Manager (NSM) before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for requests that modify user accounts via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-08-29  
Modified Date
2014-09-02  
Seq
2014-2390  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162236 30816 CVE-2014-2390 1030674  View
162237 30816 CVE-2014-2390 https://kc.mcafee.com/corporate/index?page=content&id=SB10081  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15132 JVNDB-2014-004007 McAfee Network Security Manager の User Management モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 McAfee Network Security Manager (NSM) の User Management モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-2390 69677 CVE-2014-2390 30816 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004007.html 2014-07-24 2014-09-03 View