McAfee Asset Manager Multiple Vulnerabilities

McAfee Asset Manager is prone to directory traversal and SQL injection vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Email Gateway OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 McAfee Email Gateway是一款全面的电子邮件安全解决方案。 McAfee Email Gateway所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 McAfee Email Gateway 7.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： https://kc.mcafee.com/corporate/index?page=content&id=SB10071...

McAfee Asset Manager downloadReport Information Disclosure (CVE-2014-2588)

An information disclosure vulnerability has been reported in McAfee Asset Manager. The vulnerability is due to insufficient input validation. A remote authenticated attacker can exploit this vulnerability to download arbitrary files from the server...

McAfee Web Gateway (MWG) Detection (HTTP)

Detection of McAfee Web Gateway MWG. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

McAfee Web Gateway Directory Traversal Vulnerability

McAfee Web Gateway is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Cloud Identity Manager ExtensionAccessServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of McAfee Cloud Identify Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within a servlet called ExtensionAccessServlet which contains a directory...

McAfee Email Gateway Version

Binary data mcafeeemailgatewayversion.nbin...

McAfee Email Gateway Multiple Vulnerabilities (SB10064)

The remote host is running a version of McAfee Email Gateway MEG that is affected by multiple SQL injection and command execution vulnerabilities: - Multiple SQL injections vulnerabilities exist in the administrative web interface. A remote, authenticated attacker could potentially exploit these...

McAfee Cloud Single Sign On登录审核表单跨站脚本漏洞

CVE ID:CVE-2014-2586 McAfee Cloud Single Sign On是适用于云的身份信息管理解决方案。 McAfee Cloud Single Sign On登录审核表单不正确处理特制的密码数据，允许攻击者利用漏洞注入任意WEB脚本或HTML，可获取目标用户敏感信息或劫持用户会话。 0 McAfee Cloud Single Sign On 目前没有详细解决方案提供： http://www.mcafee.com/us/products/...

McAfee Cloud Single Sign On < 4.0.1 Information Disclosure (SB10066) (McAfee Linux OS)

A version of McAfee Cloud Single Sign On MCSSO prior to 4.0.1 is installed on the remote host. It is, therefore, affected by an information disclosure vulnerability due to a failure to sanitize user-supplied input, resulting in a potential directory traversal. An attacker could potentially exploi...

McAfee Cloud Single Sign On < 4.0.1 Information Disclosure (SB10066) (Windows)

A version of McAfee Cloud Single Sign On MCSSO prior to 4.0.1 is installed on the remote host. It is, therefore, affected by an information disclosure vulnerability due to a failure to sanitize user-supplied input, resulting in potential directory traversal. An attacker could potentially exploit...

McAfee Cloud Single Sign On Detection

Binary data mcafeecssoinstalled.nbin...

McAfee Cloud Single Sign On User Interface Detection

Binary data mcafeecssowebuidetect.nbin...

McAfee Cloud Single Sign On WebUI Default Credentials

The McAfee Cloud Single Sign On WebUI interface on the remote host has the 'admin' user account secured with the default password. A remote, unauthenticated attacker could exploit this to gain administrative access to the web interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2014-2586

Cross-site scripting XSS vulnerability in the login audit form in McAfee Cloud Single Sign On SSO allows remote attackers to inject arbitrary web script or HTML via a crafted password...

CVE-2014-2587

SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report aka user parameter...

CVE-2014-2588

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. dot dot in the reportFileName parameter...

Directory traversal

Directory traversal vulnerability in servlet/downloadReport in McAfee Asset Manager 6.6 allows remote authenticated users to read arbitrary files via a .. dot dot in the reportFileName parameter...

Sql injection

SQL injection vulnerability in jsp/reports/ReportsAudit.jsp in McAfee Asset Manager 6.6 allows remote authenticated users to execute arbitrary SQL commands via the username of an audit report aka user parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the login audit form in McAfee Cloud Single Sign On SSO allows remote attackers to inject arbitrary web script or HTML via a crafted password...