3.5
CVSSv2

CVE-2012-4586

Published: 22/08/2012 Updated: 22/08/2012
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

Vulnerability Summary

McAfee Email and Web Security (EWS) 5.x prior to 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.

Vulnerable Product Search on Vulmon Subscribe to Product

mcafee email and web security 5.0

mcafee email and web security 5.6

mcafee email gateway 7.0

mcafee email and web security 5.5