CVE-2012-4587

McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and EMM Server before 10.1, when one‑time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records that can let remote attackers spoof the EMM server and discover user passwords (demonstrated on iOS). No patch/ver...

CVE-2012-4592

CVE-2012-4592 affects the McAfee Enterprise Mobility Manager (EMM) Portal prior to 10.0. The vulnerability is that the ASP.NET session cookie is not marked as Secure in HTTPS sessions, enabling attackers to capture the cookie by intercepting its transmission over HTTP. The connected documents rep...

CVE-2012-4591

The CVE-2012-4591 issue affects McAfee Enterprise Mobility Manager (EMM) before version 10.0. The About.aspx page in the Portal discloses the name of the user account used by an IIS worker process, enabling remote attackers to obtain potentially sensitive information by visiting the page. This is...

CVE-2012-4588

Affected software: McAfee Enterprise Mobility Manager (EMM) Agent < 4.8 and EMM Server

CVE-2012-4589

CVE-2012-4589 affects McAfee Enterprise Mobility Manager (EMM) Portal login.aspx prior to version 10.0. The issue is that the login form fields lack the off autocomplete attribute, which can let an unattended workstation be abused to gain access. This is described in the NVD entry for CVE-2012-45...

CVE-2012-4590

CVE-2012-4590 describes multiple XSS vulnerabilities in the About.aspx page of the Portal in McAfee Enterprise Mobility Manager (EMM) prior to version 10.0. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Connection HTTP variables. Exploitati...