Lucene search
HistoryAug 22, 2012 - 10:42 a.m.
CVE-2012-4587
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
53.3%
McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.
Affected configurations
Node
mcafeeenterprise_mobility_managerRange≤4.7
ORmcafeeenterprise_mobility_manager_agentRange≤10.0
Related
prion
prion
Design/Logic Flaw
2012-08-22 10:42:00
cve
cve
CVE-2012-4587
2012-08-22 10:42:05
cvelist
cvelist
CVE-2012-4587
2012-08-22 10:00:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
53.3%
Related for NVD:CVE-2012-4587