CVE-2012-4585

Published: Aug 22, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20120329 NGS00158 Patch Notification: McAfee Email and Web Security Appliance v5.6 - Arbitrary file download is possible with a crafted URL when logged in as any user

mailing-list

x_refsource_BUGTRAQ

https://kc.mcafee.com/corporate/index?page=content&id=SB10020

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2012-4585

Description

Affected Products

References