CVE-2019-3597

9.8 criticalEPSS 1.1%

Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
Published: 2019-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mcafee:network_security_manager

References

http://www.securityfocus.com/bid/107609
https://kc.mcafee.com/corporate/index?page=content&id=SB10275
http://www.securityfocus.com/bid/107609
https://kc.mcafee.com/corporate/index?page=content&id=SB10275

Check your stack JSON