Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 24/03/2014 Updated: 24/03/2014

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in the login audit form in McAfee Cloud Single Sign On (SSO) allows remote malicious users to inject arbitrary web script or HTML via a crafted password.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mcafee cloud single sign on -

Cloud SSO is vuln to unauthed XSS in the authentication audit form: twittercom/BrandonPrry/status/445969380656943104 McAfee Asset Manager v66 multiple vulnerabilities wwwmcafeecom/us/products/asset-manageraspx Authenticated arbitrary file read An unprivileged authenticated user can download arbitrary files with the permissio ...

CWE-79 https://twitter.com/BrandonPrry/status/445969380656943104 http://packetstormsecurity.com/files/125775/McAfee-Cloud-SSO-Asset-Manager-Issues.html http://www.securityfocus.com/bid/66302 http://www.exploit-db.com/exploits/32368 http://seclists.org/fulldisclosure/2014/Mar/325 https://nvd.nist.gov https://www.exploit-db.com/exploits/32368/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-2586

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect