Data Exposure in McAfee Email Security Products

CVE-2012-4584

Summary

An encryption flaw exists in McAfee Email and Web Security and Email Gateway products, allowing unauthorized access to sensitive data contained in system backup files. Remote authenticated users could exploit this weakness to retrieve sensitive information, such as password hashes, by accessing inadequately protected backup files. This vulnerability necessitates prompt updating of affected product versions to mitigate security risks associated with data exposure.

References