VulnerabilityModified
CVE-2012-4595
McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.
HIGH 7.5EPSS 2.53%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.53%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.53% probability · 84th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- mcafee/email and web security · mcafee/email gateway
- Source
- cve@mitre.org
References
- http://www.securitytracker.com/id?1027444
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77977
- https://kc.mcafee.com/corporate/index?page=content&id=SB10026Vendor Advisory
- http://www.securitytracker.com/id?1027444
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77977
- https://kc.mcafee.com/corporate/index?page=content&id=SB10026Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.