QwikSec

Security Database

CVE

CWE

Training

CVE-2012-4587

Published: Aug 22, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

mcafee-emm-dnssrv-spoofing(78130)

vdb-entry

x_refsource_XF

https://kc.mcafee.com/corporate/index?page=content&id=SB10021

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.