PT-2012-5503 · Mcafee · Mcafee Email/Web Security+1

Publicado 2012-08-22 · Atualizado 2017-08-29 · CVE-2012-4595

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions McAfee Email and Web Security (EWS) versions 5.5 through Patch 6 McAfee Email and Web Security (EWS) versions 5.6 through Patch 3 McAfee Email Gateway (MEG) version 7.0.0 McAfee Email Gateway (MEG) version 7.0.1

Description The issue allows remote attackers to bypass authentication and obtain an admin session ID.

Recommendations For McAfee Email and Web Security (EWS) versions 5.5 through Patch 6, apply a patch to a version later than Patch 6. For McAfee Email and Web Security (EWS) versions 5.6 through Patch 3, apply a patch to a version later than Patch 3. For McAfee Email Gateway (MEG) version 7.0.0, update to a version later than 7.0.0. For McAfee Email Gateway (MEG) version 7.0.1, update to a version later than 7.0.1.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-4595

Produtos afetados

Mcafee Email Gateway

Mcafee Email/Web Security

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/77977 · Nota
• http://securitytracker.com/id?1027444 · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10026 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-4595 · Nota de Segurança