{"id":"CVE-2019-3606","aliases":["EUVD-2019-13241","GHSA-xcf7-vc8w-v2qg"],"status":"published","title":"Data leakage when in an MDR pair by McAfee Network Security Manager 9.x","description":"Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 \u003c 9.1.7.75 (Update 4) and 9.2 \u003c 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.","severity":{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00211,"percentile":0.114,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-312"],"published":"2019-03-26T17:23:48Z","modified":"2026-06-17T02:35:17Z","products":[{"vendor":"mcafee","product":"network_security_manager"},{"vendor":"mcafee llc","product":"mcafee network security manager (nsm)"},{"vendor":"mcafee,llc","product":"mcafee network security manager (nsm)"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10274","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/107613","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3606"},{"url":"https://github.com/advisories/GHSA-xcf7-vc8w-v2qg"}],"sources":{"cve":[{"id":"CVE-2019-3606","title":"Data leakage when in an MDR pair by McAfee Network Security Manager 9.x","description":"Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 \u003c 9.1.7.75 (Update 4) and 9.2 \u003c 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.","status":"published","published":"2019-03-26T17:23:48Z","modified":"2024-08-04T19:12:09.668Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13241","description":"Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 \u003c 9.1.7.75 (Update 4) and 9.2 \u003c 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.","status":"published","published":"2019-03-26T17:23:48Z","modified":"2024-08-04T19:12:09Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:06:54.939848Z"}],"ghsa":[{"id":"GHSA-xcf7-vc8w-v2qg","title":"Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee...","description":"Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 \u003c 9.1.7.75 (Update 4) and 9.2 \u003c 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.","status":"published","published":"2022-05-13T01:22:28Z","modified":"2023-02-01T05:06:32Z","cvss":[{"version":"3.0","score":4.1,"vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:50:22.333418Z"}],"nvd":[{"id":"CVE-2019-3606","description":"Data Leakage Attacks vulnerability in the web portal component when in an MDR pair in McAfee Network Security Management (NSM) 9.1 \u003c 9.1.7.75 (Update 4) and 9.2 \u003c 9.2.7.31 Update2 allows administrators to view configuration information in plain text format via the GUI or GUI terminal commands.","status":"published","published":"2019-03-26T18:29:00.513Z","modified":"2026-06-17T02:35:17.95Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":4.1,"vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":1.9,"vector":"AV:L/AC:M/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-312"],"updated_at":"2026-11-02T14:05:09.523883Z"}]}}