Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2015-8989

EPSS 0.30% · P53
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-8989

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 and earlier allows attackers to more easily decrypt user passwords via brute force attacks against the database.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
McAfee Vulnerability Manager Enterprise Manager组件加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
McAfee Vulnerability Manager(MVM)是美国迈克菲(McAfee)公司的一套安全风险管理解决方案。该方案能够快速扫描网络中的漏洞及区分漏洞优先级,并进行评估,进而反映网络上所有资产的合规状态。Enterprise Manager(web portal)是其中的一个基于Web的管理组件。 McAfee MVM 7.5.8及之前版本中的Enterprise Manager (web portal)组件存在加密问题漏洞。远程攻击者可利用该漏洞暴力破解用户密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
IntelMcAfee Vulnerability Manager (MVM) 7.5.8 and earlier -

II. Public POCs for CVE-2015-8989

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-8989

Please Login to view more intelligence information

Same Patch Batch · Intel · 2017-03-14 · 32 CVEs total

CVE-2016-8009Intel Security McAfee Application Control 权限许可和访问控制漏洞
CVE-2017-3899Intel Security Advanced Threat Defense Linux SQL注入漏洞
CVE-2016-8026Intel Security McAfee Security Scan Plus 安全漏洞
CVE-2016-8025Intel Security VirusScan Enterprise Linux SQL注入漏洞
CVE-2016-8024Intel Security VirusScan Enterprise Linux 安全漏洞
CVE-2016-8023Intel Security VirusScan Enterprise Linux 安全漏洞
CVE-2016-8022Intel Security VirusScan Enterprise Linux 安全漏洞
CVE-2016-8021Intel Security VirusScan Enterprise Linux 安全漏洞
CVE-2016-8020Intel Security VirusScan Enterprise Linux 安全漏洞
CVE-2016-8019Intel Security VirusScan Enterprise Linux 跨站脚本漏洞
CVE-2016-8018Intel Security VirusScan Enterprise Linux 跨站请求伪造漏洞
CVE-2016-8017Intel Security VirusScan Enterprise Linux 安全漏洞
CVE-2016-8016Intel Security VirusScan Enterprise Linux 信息泄露漏洞
CVE-2016-8012Intel Security Data Loss Prevention Endpoint 安全漏洞
CVE-2016-8011Intel Security McAfee Endpoint Security Web Control 跨站脚本漏洞
CVE-2016-8010Intel Security McAfee Application Control 安全漏洞
CVE-2013-7460Intel Security McAfee Application Control 安全漏洞
CVE-2016-8008Intel Security McAfee Security Scan Plus 权限许可和访问控制漏洞
CVE-2016-8007Intel Security Host Intrusion Prevention Services 安全漏洞
CVE-2016-8005Intel Security McAfee Email Gateway 安全漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2015-8989

No comments yet


Leave a comment