PT-2012-5507 · Red Hat+1 · Jboss+1

Published 2012-08-22 · Updated 2017-01-20 · CVE-2012-4599

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee SmartFilter Administration versions prior to 4.2.1.01 McAfee SmartFilter Administration Bess Edition versions prior to 4.2.1.01

Description The issue allows remote attackers to execute arbitrary code via a crafted .war file, due to the lack of authentication requirement for access to the JBoss Remote Method Invocation (RMI) interface.

Recommendations For McAfee SmartFilter Administration versions prior to 4.2.1.01, update to version 4.2.1.01 or later. For McAfee SmartFilter Administration Bess Edition versions prior to 4.2.1.01, update to version 4.2.1.01 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-4599

Affected Products

Jboss

Mcafee Smartfilter Administration

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-4599 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10029 · Vendor Advisory