Improper Access Control in McAfee Email and Web Security and Gateway
CVE-2012-4586

Currently unrated

Key Information:

Vendor

Mcafee
Status
Email And Web Security
Email Gateway
Vendor
CVE Published:
22 August 2012

What is CVE-2012-4586?

An improper access control vulnerability exists in McAfee Email and Web Security versions prior to 5.5 Patch 6 and 5.6 before Patch 3, as well as in McAfee Email Gateway 7.0 before Patch 1. This issue allows remote authenticated users to access files with root user privileges, potentially bypassing intended permission settings. Exploiting this vulnerability can lead to unauthorized access to sensitive files, posing a significant risk to the confidentiality and integrity of the affected systems.

References

https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.