CVE-2010-2116

Currently unrated

Key Information:

Vendor
Mcafee
Status
Secure Mail
Email Gateway
Vendor
CVE Published:
28 May 2010

Summary

The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.

References

http://secunia.com/advisories/39881
third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1024018
vdb-entryx_refsource_SECTRACK
http://osvdb.org/64832
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.