PT-2010-3726 · Mcafee · Mcafee Email Gateway

Published 2010-05-28 · Updated 2020-01-10 · CVE-2010-2116

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway version 6.7.1

Description The issue allows remote authenticated users with only Read privileges to gain Write privileges and modify configuration. This is achieved through a direct request to the "admin/systemWebAdminConfig.do" API endpoint, specifically by utilizing the save action.

Recommendations For McAfee Email Gateway version 6.7.1, consider restricting access to the "admin/systemWebAdminConfig.do" API endpoint to prevent unauthorized modification of configuration settings. As a temporary workaround, limit the privileges of users to prevent them from exploiting the save action in the web interface.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2010-2116

Affected Products

Mcafee Email Gateway

References · 6

• 🔥 http://cybsec.com/vuln/cybsec_advisory_2010_0501_Ironmail_Advisory_Web_Access_Broken.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-2116 · Security Note
• http://vupen.com/english/advisories/2010/1239 · Vendor Advisory
• http://secunia.com/advisories/39881 · Vendor Advisory
• http://osvdb.org/64832 · Note
• http://securitytracker.com/id?1024018 · Note