PT-2012-5504 · Mcafee · Mcafee Email Gateway

Publicado 2012-08-22 · Atualizado 2013-04-11 · CVE-2012-4596

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway versions 7.0.0 through 7.0.1

Description A directory traversal issue allows remote authenticated users to bypass access restrictions and download arbitrary files via a crafted URL.

Recommendations For versions 7.0.0 and 7.0.1, update to a version that contains a fix for this issue to prevent remote authenticated users from downloading arbitrary files.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2012-4596

Produtos afetados

Mcafee Email Gateway

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4596 · Nota de Segurança
• http://securitytracker.com/id?1027444 · Nota
• https://kc.mcafee.com/corporate/index?page=content&id=SB10026 · Aviso do Fabricante