CVEvulnerability
CVE-2012-4589
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-08-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Affected configurations
• mcafee enterprise mobility manager (<= 9.6)
• mcafee enterprise mobility manager 4.7
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78223 exchange.xforce.ibmcloud.com
- https://kc.mcafee.com/corporate/index?page=content&id=SB10022 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78223 exchange.xforce.ibmcloud.com
- https://kc.mcafee.com/corporate/index?page=content&id=SB10022 Vendor Advisory