Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2012-4588

EPSS 0.44% · P63
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2012-4588

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
McAfee Enterprise Mobility Manager 信任管理漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
McAfee Enterprise Mobility Manager (EMM) Agent 4.8之前版本和Server 10.1之前版本中存在漏洞,该漏洞源于记录所有在尝试登录失败无效的用户名,并放置他们在管理员可能想解锁的用户列表中。远程攻击者可利用该漏洞通过不同用户名尝试登录的长序列,导致拒绝服务(EMM数据库中过多列表的大小)。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2012-4588

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2012-4588

登录查看更多情报信息。

Same Patch Batch · n/a · 2012-08-22 · 35 CVEs total

CVE-2012-4592McAfee Enterprise Mobility Manager 设计错误漏洞
CVE-2012-4583McAfee EWS/MEG 信息泄露漏洞
CVE-2012-4584McAfee EWS/MEG 加密问题漏洞
CVE-2012-4585McAfee EWS/MEG 权限许可和访问控制漏洞
CVE-2012-4586McAfee EWS/MEG 权限许可和访问控制漏洞
CVE-2012-4587McAfee Enterprise Mobility Manager 权限许可和访问控制漏洞
CVE-2012-4589McAfee Enterprise Mobility Manager 设计错误漏洞
CVE-2012-4590McAfee Enterprise Mobility Manage 跨站脚本漏洞
CVE-2012-4591McAfee Enterprise Mobility Manager 信息泄露漏洞
CVE-2012-4582McAfee EWS/MEG 权限许可和访问控制漏洞
CVE-2012-4593McAfee Application Control/Change Control 权限许可和访问控制漏洞
CVE-2012-4594McAfee ePolicy Orchestrator 权限许可和访问控制漏洞
CVE-2012-4595McAfee EWS/MEG 授权问题漏洞
CVE-2012-4596McAfee Email Gateway 路径遍历漏洞
CVE-2012-4597McAfee EWS/MEG 跨站脚本漏洞
CVE-2012-4598McAfee Virtual Technician 任意代码执行漏洞
CVE-2012-4599McAfee SmartFilter Administration/SmartFilter Administration Bess Edition 授权问题漏洞
CVE-2010-3499F-Secure Anti-Virus 权限许可和访问控制漏洞
CVE-2012-3502Apache HTTP Server 信息泄露漏洞
CVE-2009-5115McAfee CMA/Agent 权限许可和访问控制漏洞

Showing top 20 of 35 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2012-4588

No comments yet


Leave a comment