Mcafee Plugs Hole In Its Own Security Certification Page

[Peaches]

6 May 2009, 12:13

McAfee plugs hole in its own security certification page

According to an old proverb 'The cobbler has the worst shoes'. It's now been reported that Secure, McAfee's security portal, has had poor shoes or rather poor security, because until recently it displayed a vulnerability to cross-site request forgery (CSRF).

McAfee Secure is a service that lets clients use the Hacker Safe tool to check their sites or online shops for security vulnerabilities and for compliance with the PCI Data Security Standard, which is important for credit-card transactions. If the check shows sites are OK, shop operators can include the McAfee Secure logo in their web site. This is supposed to reassure their customers that their data is well protected and there's no danger lurking in transactions, such as making payments."

Heise security for more details - http://www.h-online.com/security/McAfee-pl...e--/news/113224