CVE-2012-4591 in Enterprise Mobility Manager

Résumé

par MITRE

About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 22/08/2012
• Divulgation: 22/08/2012
• Modérer: accepté
• Entrée: VDB-61750
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00250
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4591
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4591
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4591/