CVEvulnerability
CVE-2012-4586
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-08-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, accesses files with the privileges of the root user, which allows remote authenticated users to bypass intended permission settings by requesting a file.
Affected configurations
• mcafee email and web security 5.0
• mcafee email and web security 5.5
• mcafee email and web security 5.6
• mcafee email gateway 7.0
Related
Weakness · not in database (1)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020 Vendor Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10020 Vendor Advisory