PT-2012-3885 · Mcafee · Mcafee Web Gateway

Published 2012-04-28 · Updated 2024-08-06 · CVE-2012-2212

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway version 7.0

Description The issue allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. It is noted that this issue might not be reproducible due to a lack of configuration details for the vulnerable system, and the observed behavior could be consistent with a configuration designed to allow access based on Host HTTP headers.

Recommendations For McAfee Web Gateway version 7.0, consider restricting access to the CONNECT method to minimize the risk of exploitation. As a temporary workaround, review and adjust the configuration to ensure it does not inadvertently allow access based on arbitrary Host HTTP headers. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-2212

Affected Products

Mcafee Web Gateway

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-2212 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0189.html · Note
• https://t.me/cvenotify/89500 · Telegram Post
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0118.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-04/0164.html · Note
• https://t.me/cvenotify/83666 · Telegram Post