CVE:CVE-2005-2187
CNNVD:CNNVD-200507-082
McAfee IntruShield Security Management System是McAfee入侵防护设备管理软件。
IntruShield Security Management System存在获取访问权限漏洞。
远程认证的用户可通过将Access选项设置为true来访问"生成报告"功能并修改警报，例如reports-column-center.jsp中fullAccess/fullAccessRight参数，或SystemEvent.jsp的fullAccess参数。
solution:Upgrade mcafee intrushield_security_management_system to a higher version than *