CVE-2012-4586
low
CVSS v3
—
CVSS v2
3.5
VIR risk
3.5
Description
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — https://kc.mcafee.com/corporate/index?page=content&id=SB10020
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| mcafee | email_and_web_security | 5.0 | |
| mcafee | email_and_web_security | 5.5 | |
| mcafee | email_and_web_security | 5.6 | |
| mcafee | email_gateway | 7.0 | |
References
CWEs
CWE-264
Verify integrity in audit chain (admin only). AS-IS.