Denial of Service Vulnerability in McAfee Enterprise Mobility Manager Agent
CVE-2012-4588

Currently unrated

Key Information:

Vendor
Mcafee
Status
Enterprise Mobility Manager
Enterprise Mobility Manager Agent
Vendor
CVE Published:
22 August 2012

Summary

The McAfee Enterprise Mobility Manager (EMM) Agent and Server prior to specific versions are susceptible to a denial of service vulnerability. This occurs when the products log invalid usernames from failed login attempts, accumulating them in a list intended for administrative review. Attackers can exploit this by submitting numerous erroneous login requests with various usernames, potentially overwhelming the EMM database and causing service disruptions.

References

https://kc.mcafee.com/corporate/index?page=content&id=SB1...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.