McAfee Web Gateway (MWG) Detection (HTTP)

Detection of McAfee Web Gateway MWG. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

McAfee Web Gateway Directory Traversal Vulnerability

McAfee Web Gateway is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Cloud Identity Manager ExtensionAccessServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Cloud Identify Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within a servlet called ExtensionAccessServlet which contains a directory...

McAfee Email Gateway Version

Binary data mcafeeemailgatewayversion.nbin...

McAfee Email Gateway Multiple Vulnerabilities (SB10064)

The remote host is running a version of McAfee Email Gateway MEG that is affected by multiple SQL injection and command execution vulnerabilities: - Multiple SQL injections vulnerabilities exist in the administrative web interface. A remote, authenticated attacker could potentially exploit these...

McAfee Cloud Single Sign On登录审核表单跨站脚本漏洞

CVE ID:CVE-2014-2586 McAfee Cloud Single Sign On是适用于云的身份信息管理解决方案。 McAfee Cloud Single Sign On登录审核表单不正确处理特制的密码数据，允许攻击者利用漏洞注入任意WEB脚本或HTML，可获取目标用户敏感信息或劫持用户会话。 0 McAfee Cloud Single Sign On 目前没有详细解决方案提供： http://www.mcafee.com/us/products/...

McAfee Cloud Single Sign On User Interface Detection

Binary data mcafeecssowebuidetect.nbin...

McAfee Cloud Single Sign On Detection

Binary data mcafeecssoinstalled.nbin...

McAfee Cloud Single Sign On < 4.0.1 Information Disclosure (SB10066) (Windows)

A version of McAfee Cloud Single Sign On MCSSO prior to 4.0.1 is installed on the remote host. It is, therefore, affected by an information disclosure vulnerability due to a failure to sanitize user-supplied input, resulting in potential directory traversal. An attacker could potentially exploit...

McAfee Cloud Single Sign On WebUI Default Credentials

The McAfee Cloud Single Sign On WebUI interface on the remote host has the 'admin' user account secured with the default password. A remote, unauthenticated attacker could exploit this to gain administrative access to the web interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

McAfee Cloud Single Sign On < 4.0.1 Information Disclosure (SB10066) (McAfee Linux OS)

A version of McAfee Cloud Single Sign On MCSSO prior to 4.0.1 is installed on the remote host. It is, therefore, affected by an information disclosure vulnerability due to a failure to sanitize user-supplied input, resulting in a potential directory traversal. An attacker could potentially exploi...

CVE-2014-2586

Cross-site scripting XSS vulnerability in the login audit form in McAfee Cloud Single Sign On SSO allows remote attackers to inject arbitrary web script or HTML via a crafted password...

CVE-2014-2587

SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report aka user parameter...

CVE-2014-2588

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. dot dot in the reportFileName parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the login audit form in McAfee Cloud Single Sign On SSO allows remote attackers to inject arbitrary web script or HTML via a crafted password...

Directory traversal

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. dot dot in the reportFileName parameter...

Sql injection

SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report aka user parameter...

CVE-2014-2588

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. dot dot in the reportFileName parameter...

CVE-2014-2586

CVE-2014-2586 describes a Cross-site scripting (XSS) vulnerability in the login audit form of McAfee Cloud Single Sign On (SSO) . The flaw allows a remote attacker to inject arbitrary web script or HTML via a crafted password. Some sources imply the impact could include access to sensitive user i...

CVE-2014-2587

SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report aka user parameter...