Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-4599

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2012-4599
Last Modified 22 Aug 2012 12:00:00
Published 22 Aug 2012 06:42:05
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2012-4599

Summary

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBOSS Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.

Vulnerable Systems

Application

  • Mcafee Smartfilter Administration 4.2.1


References

CONFIRM - https://kc.mcafee.com/corporate/index?page=content&id=SB10029


Last Updated: 27 May 2016 10:51:42