EUVD-2012-4512

Malware in sbrugna...

EUVD-2012-4515

Malware in sbrugna...

EUVD-2012-4517

Malware in sbrugna...

CVE-2012-4588

McAfee Enterprise Mobility Manager EMM Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service excessive list...

CVE-2012-4592

The Portal in McAfee Enterprise Mobility Manager EMM before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

Design/Logic Flaw

Login.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

Code injection

About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...

CVE-2012-4589

Login.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

PT-2012-5495

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM Agent versions prior to 4.8 McAfee Enterprise Mobility Manager EMM Server versions prior to 10.1 Description The issue is related to an improper dependency on DNS SRV records when one-time provisioning OT...

PT-2012-5498

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM versions prior to 10.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the About.aspx page of the Portal in McAfee Enterprise Mobility Manager EMM. These vulnerabilitie...

PT-2012-5499

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM versions prior to 10.0 Description The issue allows remote attackers to obtain potentially sensitive information by visiting the About.aspx page in the Portal, which discloses the name of the user account...

PT-2012-5496

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM Agent versions prior to 4.8 McAfee Enterprise Mobility Manager EMM Server versions prior to 10.1 Description The issue allows remote attackers to cause a denial of service by making a long sequence of log...

PT-2012-5497

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM versions prior to 10.0 Description The issue concerns the Login.aspx page in the Portal of McAfee Enterprise Mobility Manager EMM, where the lack of an autocomplete attribute for unspecified form fields...

PT-2012-5500

Name of the Vulnerable Software and Affected Versions McAfee Enterprise Mobility Manager EMM versions prior to 10.0 Description The issue concerns the Portal in McAfee Enterprise Mobility Manager EMM where the secure flag for the ASP.NET session cookie is not set in an https session. This makes i...

CVE-2012-4590: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 might allow remote attackers to inject arbitrary web script or HTML via the 1 User Agent or 2 Connection variable...

CVE-2012-4587: Undefined Security Weakness

McAfee Enterprise Mobility Manager EMM Agent before 4.8 and Server before 10.1, when one-time provisioning OTP mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a...

CVE-2012-4592: Undefined Security Weakness

The Portal in McAfee Enterprise Mobility Manager EMM before 10.0 does not set the secure flag for the ASP.NET session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2012-4589: Undefined Security Weakness

Login.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

CVE-2012-4591: Exposure of Sensitive Information to an Unauthorized Actor

About.aspx in the Portal in McAfee Enterprise Mobility Manager EMM before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page...

CVE-2012-4588: Undefined Security Weakness

McAfee Enterprise Mobility Manager EMM Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service excessive list...