CVE-2012-2212

EPSS 0.1%
Veröffentlicht 28.04.2012 10:06:13
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header.  NOTE: this issue might not be reproducible, because the researcher did not provide configuration details for the vulnerable system, and the observed behavior might be consistent with a configuration that was (perhaps inadvertently) designed to allow access based on Host HTTP headers

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mcafee ≫ Web Gateway Version7.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.1%	0.287

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://archives.neohapsis.com/archives/bugtraq/2012-04/0118.html

http://archives.neohapsis.com/archives/bugtraq/2012-04/0164.html

http://archives.neohapsis.com/archives/bugtraq/2012-04/0189.html

https://nvd.nist.gov/vuln/detail/CVE-2012-2212

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2212

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2212

EUVD