Authentication flaw

2012-08-2210:42:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.6%

JSON

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.

CPENameOperatorVersion
smartfilter_administrationle4.2.1
smartfilter_administrationle4.2.1

CPE	Name	Operator	Version
	smartfilter_administration	le	4.2.1
	smartfilter_administration	le	4.2.1

References

kc.mcafee.com/corporate/index?page=content&id=SB10029