Lucene search

MitreCVE-2012-4599

HistoryAug 22, 2012 - 10:42 a.m.

CVE-2012-4599

2012-08-2210:42:05

CWE-287

mitre

web.nvd.nist.gov

mcafee

smartfilter

administration

authentication

jboss

rmi

remote code execution

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.009

Percentile

82.6%

JSON

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.

Affected configurations

Nvd

Node

mcafeesmartfilter_administrationRange≤4.2.1

mcafeesmartfilter_administrationRange≤4.2.1bess

VendorProductVersionCPE
mcafeesmartfilter_administration*cpe:2.3:a:mcafee:smartfilter_administration:*:*:*:*:*:*:*:*
mcafeesmartfilter_administration*cpe:2.3:a:mcafee:smartfilter_administration:*:*:bess:*:*:*:*:*

Vendor	Product	Version	CPE
mcafee	smartfilter_administration	*	cpe:2.3:a:mcafee:smartfilter_administration::::::::
mcafee	smartfilter_administration	*	cpe:2.3:a:mcafee:smartfilter_administration:::bess:::::*

References

kc.mcafee.com/corporate/index?page=content&id=SB10029

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.009

Percentile

82.6%

JSON

Related for CVE-2012-4599