Medium severity6.5NVD Advisory· Published Mar 26, 2019· Updated Jun 17, 2026

CVE-2019-3597

Description

Authentication Bypass vulnerability in McAfee Network Security Manager (NSM) 9.1 < 9.1.7.75.2 and 9.2 < 9.2.7.31 (9.2 Update 2) allows unauthenticated users to gain administrator rights via incorrect handling of expired GUI sessions.

Affected products

McAfee/Intrushield Security Management System
cpe:2.3:a:mcafee:network_security_manager:*:*:*:*:*:*:*:*
Range: >=9.1,<9.1.7.75
McAfee/NSMllm-create
Range: < 9.1.7.75.2, < 9.2.7.31
McAfee/Network Security Managerllm-fuzzy
Range: < 9.1.7.75.2, < 9.2.7.31
McAfee LLC/McAfee Network Security Manager (NSM)v5
Range: 9.1

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/107609nvd
kc.mcafee.com/corporate/indexnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000