7.5

CVE-2012-4595

McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mcafee ≫ Email And Web Security Version 5.5
Mcafee ≫ Email And Web Security Version 5.6
Mcafee ≫ Email Gateway Version 7.0.0
Mcafee ≫ Email Gateway Version 7.0.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.53% 0.828
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securitytracker.com/id?1027444
https://exchange.xforce.ibmcloud.com/vulnerabilities/77977
https://kc.mcafee.com/corporate/index?page=content&id=SB10026
Vendor Advisory