Mcafee : Security Vulnerabilities, CVEs, Published In 2012 (Information Leak)
About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page.
Max CVSS
5.0
EPSS Score
0.39%
Published
2012-08-22
Updated
2017-08-29
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to obtain the session tokens of arbitrary users by navigating within the Dashboard.
Max CVSS
4.0
EPSS Score
0.12%
Published
2012-08-22
Updated
2012-11-20
The Web Post Protection feature in McAfee Host Data Loss Prevention (DLP) 3.x before 3.0.100.10 and 9.x before 9.0.0.422, when HTTP Capture mode is enabled, allows local users to obtain sensitive information from web traffic by reading unspecified files.
Max CVSS
1.9
EPSS Score
0.04%
Published
2012-08-22
Updated
2017-08-29
3 vulnerabilities found