Lucene search

K
nvd[email protected]NVD:CVE-2012-4599
HistoryAug 22, 2012 - 10:42 a.m.

CVE-2012-4599

2012-08-2210:42:05
CWE-287
web.nvd.nist.gov
2

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.009

Percentile

82.6%

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.

Affected configurations

Nvd
Node
mcafeesmartfilter_administrationRange4.2.1
OR
mcafeesmartfilter_administrationRange4.2.1bess
VendorProductVersionCPE
mcafeesmartfilter_administration*cpe:2.3:a:mcafee:smartfilter_administration:*:*:*:*:*:*:*:*
mcafeesmartfilter_administration*cpe:2.3:a:mcafee:smartfilter_administration:*:*:bess:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.009

Percentile

82.6%

Related for NVD:CVE-2012-4599