CVE-2012-4591 in Enterprise Mobility Manager

Riassunto

di MITRE

About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 22/08/2012
• Divulgazione: 22/08/2012
• Moderazione: accettato
• Voce: VDB-61750
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00250
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-4591
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-4591
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-4591/