CVEvulnerability

CVE-2015-8024

9.3 HIGH Published 2015-12-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-12-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78

Description

McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) 9.3.x before 9.3.2MR19, 9.4.x before 9.4.2MR9, and 9.5.x before 9.5.0MR8, when configured to use Active Directory or LDAP authentication sources, allow remote attackers to bypass authentication by logging in with the username "NGCP|NGCP|NGCP;" and any password.

Affected configurations

• mcafee mcafee enterprise security manager 9.3.0 • mcafee mcafee enterprise security manager 9.3.1 • mcafee mcafee enterprise security manager 9.3.2 • mcafee mcafee enterprise security manager 9.4.0 • mcafee mcafee enterprise security manager 9.4.1 • mcafee mcafee enterprise security manager 9.4.2 • mcafee mcafee enterprise security manager 9.5.0

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References