Password Reset Vulnerability in McAfee Email and Web Security and McAfee Email Gateway

CVE-2012-4582

What is CVE-2012-4582?

McAfee Email and Web Security and McAfee Email Gateway are susceptible to a vulnerability that allows remote authenticated users to reset the passwords of arbitrary administrative accounts, potentially leading to unauthorized access. This issue arises from unspecified vectors that bypass security controls. Affected versions include McAfee Email and Web Security 5.x before Patch 6, 5.6 before Patch 3, and McAfee Email Gateway 7.0 before Patch 1. Users of these products should apply the latest patches to mitigate the risk.

References