cnvd - cnvd-2020-50498

cnvd-2020-50498

Vulnerability from cnvd

Title: McAfee Network Security Management信息泄露漏洞（CNVD-2020-50498）

Description:

McAfee Network Security Management（NSM）是美国迈克菲（McAfee）公司的一套能够实时监控整个网络中已部署的迈克菲入侵防护系统的网络安全解决方案。

McAfee NSM 10.1.7.7 之前版本中存在信息泄露漏洞。本地攻击者可借助特制命令利用该漏洞对root账户进行未授权访问。

Severity: 高

Patch Name: McAfee Network Security Management信息泄露漏洞（CNVD-2020-50498）的补丁

Patch Description:

McAfee Network Security Management（NSM）是美国迈克菲（McAfee）公司的一套能够实时监控整个网络中已部署的迈克菲入侵防护系统的网络安全解决方案。

McAfee NSM 10.1.7.7 之前版本中存在信息泄露漏洞。本地攻击者可借助特制命令利用该漏洞对root账户进行未授权访问。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://kc.mcafee.com/corporate/index?page=content&id=SB10322

Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-7284

Impacted products

Name
McAfee Network Security Management <10.1.7.7

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-7284"
    }
  },
  "description": "McAfee Network Security Management\uff08NSM\uff09\u662f\u7f8e\u56fd\u8fc8\u514b\u83f2\uff08McAfee\uff09\u516c\u53f8\u7684\u4e00\u5957\u80fd\u591f\u5b9e\u65f6\u76d1\u63a7\u6574\u4e2a\u7f51\u7edc\u4e2d\u5df2\u90e8\u7f72\u7684\u8fc8\u514b\u83f2\u5165\u4fb5\u9632\u62a4\u7cfb\u7edf\u7684\u7f51\u7edc\u5b89\u5168\u89e3\u51b3\u65b9\u6848\u3002\n\nMcAfee NSM 10.1.7.7 \u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u547d\u4ee4\u5229\u7528\u8be5\u6f0f\u6d1e\u5bf9root\u8d26\u6237\u8fdb\u884c\u672a\u6388\u6743\u8bbf\u95ee\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10322",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-50498",
  "openTime": "2020-09-03",
  "patchDescription": "McAfee Network Security Management\uff08NSM\uff09\u662f\u7f8e\u56fd\u8fc8\u514b\u83f2\uff08McAfee\uff09\u516c\u53f8\u7684\u4e00\u5957\u80fd\u591f\u5b9e\u65f6\u76d1\u63a7\u6574\u4e2a\u7f51\u7edc\u4e2d\u5df2\u90e8\u7f72\u7684\u8fc8\u514b\u83f2\u5165\u4fb5\u9632\u62a4\u7cfb\u7edf\u7684\u7f51\u7edc\u5b89\u5168\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nMcAfee NSM 10.1.7.7 \u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u547d\u4ee4\u5229\u7528\u8be5\u6f0f\u6d1e\u5bf9root\u8d26\u6237\u8fdb\u884c\u672a\u6388\u6743\u8bbf\u95ee\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "McAfee Network Security Management\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2020-50498\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "McAfee Network Security Management \u003c10.1.7.7"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-7284",
  "serverity": "\u9ad8",
  "submitTime": "2020-07-06",
  "title": "McAfee Network Security Management\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CNVD-2020-50498\uff09"
}

CVE-2020-7284 (GCVE-0-2020-7284)

Vulnerability from cvelistv5

Published

2020-07-03 18:40

Modified

2024-08-04 09:25

Severity ?

8.6 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-200 - Information Exposure

Summary

Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI).

References

▼	URL	Tags
	https://kc.mcafee.com/corporate/index?page=content&id=SB10322	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	McAfee	Network Security Management (NSM)	Version: unspecified < 10.1.7.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:25:48.430Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10322"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Network Security Management (NSM)",
          "vendor": "McAfee",
          "versions": [
            {
              "lessThan": "10.1.7.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Information Exposure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-03T18:40:12",
        "orgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
        "shortName": "trellix"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10322"
        }
      ],
      "source": {
        "advisory": "SB10322",
        "discovery": "EXTERNAL"
      },
      "title": "Network Security Management (NSM) - Exposure of Sensitive Information ",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@mcafee.com",
          "ID": "CVE-2020-7284",
          "STATE": "PUBLIC",
          "TITLE": "Network Security Management (NSM) - Exposure of Sensitive Information "
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Network Security Management (NSM)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "10.1.7.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "McAfee"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted commands from the restricted command line interface (CLI)."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-200 Information Exposure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10322",
              "refsource": "MISC",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10322"
            }
          ]
        },
        "source": {
          "advisory": "SB10322",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
    "assignerShortName": "trellix",
    "cveId": "CVE-2020-7284",
    "datePublished": "2020-07-03T18:40:12",
    "dateReserved": "2020-01-21T00:00:00",
    "dateUpdated": "2024-08-04T09:25:48.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted