Lucene search

K
cveMitreCVE-2012-4589
HistoryAug 22, 2012 - 10:42 a.m.

CVE-2012-4589

2012-08-2210:42:05
mitre
web.nvd.nist.gov
27
cve-2012-4589
login.aspx
mcafee
enterprise mobility manager
security vulnerability
remote attack
access control

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

41.0%

Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected configurations

Nvd
Node
mcafeeenterprise_mobility_managerRange9.6
OR
mcafeeenterprise_mobility_managerMatch4.7
VendorProductVersionCPE
mcafeeenterprise_mobility_manager*cpe:2.3:a:mcafee:enterprise_mobility_manager:*:*:*:*:*:*:*:*
mcafeeenterprise_mobility_manager4.7cpe:2.3:a:mcafee:enterprise_mobility_manager:4.7:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

41.0%

Related for CVE-2012-4589