Lucene search

K
cveMitreCVE-2012-4582
HistoryAug 22, 2012 - 10:42 a.m.

CVE-2012-4582

2012-08-2210:42:04
CWE-264
mitre
web.nvd.nist.gov
22
mcafee
ews
meg
security vulnerability
cve-2012-4582
password reset
nvd

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

45.5%

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to reset the passwords of arbitrary administrative accounts via unspecified vectors.

Affected configurations

Nvd
Node
mcafeeemail_and_web_securityMatch5.0
OR
mcafeeemail_and_web_securityMatch5.5
OR
mcafeeemail_and_web_securityMatch5.6
OR
mcafeeemail_gatewayMatch7.0
VendorProductVersionCPE
mcafeeemail_and_web_security5.0cpe:2.3:a:mcafee:email_and_web_security:5.0:*:*:*:*:*:*:*
mcafeeemail_and_web_security5.5cpe:2.3:a:mcafee:email_and_web_security:5.5:*:*:*:*:*:*:*
mcafeeemail_and_web_security5.6cpe:2.3:a:mcafee:email_and_web_security:5.6:*:*:*:*:*:*:*
mcafeeemail_gateway7.0cpe:2.3:a:mcafee:email_gateway:7.0:*:*:*:*:*:*:*

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

45.5%

Related for CVE-2012-4582