5

CVE-2012-2212

EPSS 1.45%
Veröffentlicht 28.04.2012 10:06:13
Zuletzt bearbeitet 16.06.2026 23:41:11
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header.  NOTE: this issue might not be reproducible, because the researcher did not provide configuration details for the vulnerable system, and the observed behavior might be consistent with a configuration that was (perhaps inadvertently) designed to allow access based on Host HTTP headers

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mcafee ≫ Web Gateway Version7.0.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.45%	0.698

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/bugtraq/2012-04/0118.html

http://archives.neohapsis.com/archives/bugtraq/2012-04/0164.html

http://archives.neohapsis.com/archives/bugtraq/2012-04/0189.html

https://nvd.nist.gov/vuln/detail/CVE-2012-2212

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2212

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2212

EUVD