Information Disclosure Vulnerability in McAfee Enterprise Mobility Manager

CVE-2012-4591

Summary

The About.aspx page in McAfee's Enterprise Mobility Manager (EMM) versions prior to 10.0 has a security flaw that exposes the names of user accounts associated with the IIS worker process. This vulnerability can be exploited by remote attackers, allowing them to retrieve potentially sensitive account information simply by accessing the affected page. Organizations using these vulnerable versions of EMM are urged to update their software to mitigate risks associated with this disclosure.

References