CVEvulnerability
CVE-2012-4588
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-255
Description
McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames.
Affected configurations
• mcafee enterprise mobility manager (<= 4.7)
• mcafee enterprise mobility manager agent (<= 10.0)
Related
Weakness · not in database (1)
References
- https://kc.mcafee.com/corporate/index?page=content&id=SB10021 Vendor Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10021 Vendor Advisory