CVEvulnerability
CVE-2015-8989
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database.
Affected configurations
• mcafee vulnerability manager (<= 7.5.8)
Related
Weakness · not in database (1)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10117 Vendor Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10117 Vendor Advisory