CVE-2012-4595

EUVD-2012-4520
McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
mcafeeemail_and_web_security
5.5
mcafeeemail_and_web_security
5.6
mcafeeemail_gateway
7.0.0
mcafeeemail_gateway
7.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securitytracker.com/id?1027444
https://exchange.xforce.ibmcloud.com/vulnerabilities/77977
https://kc.mcafee.com/corporate/index?page=content&id=SB10026
http://www.securitytracker.com/id?1027444
https://exchange.xforce.ibmcloud.com/vulnerabilities/77977
https://kc.mcafee.com/corporate/index?page=content&id=SB10026