Session Token Exposure in McAfee Email and Web Security Products
CVE-2012-4583
Currently unrated
Key Information:
- Vendor
Mcafee
- Vendor
- CVE Published:
- 22 August 2012
What is CVE-2012-4583?
A security vulnerability in McAfee Email and Web Security versions prior to 5.5 Patch 6 and 5.6 Patch 3, as well as McAfee Email Gateway version 7.0 before Patch 1, allows remote authenticated users to access the session tokens of other users via navigational actions within the Dashboard. This exploit can facilitate unauthorized access to sensitive user sessions, posing significant privacy and security risks for organizations using these products.