CVE-2012-4587

McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.

CVSS v2.0 3.5 LOW

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/78130
https://kc.mcafee.com/corporate/index?page=content&id=SB10021	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mcafee:enterprise_mobility_manager::::::::
	cpe:2.3:a:mcafee:enterprise_mobility_manager_agent::::::::

History

No history.

Information

Published : 2012-08-22 10:42

Updated : 2023-12-10 11:16

NVD link : CVE-2012-4587

Mitre link : CVE-2012-4587

CVE.ORG link : CVE-2012-4587

JSON object : View

Products Affected

mcafee

enterprise_mobility_manager_agent
enterprise_mobility_manager

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2012-4587", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-08-22T10:42:05.007", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78130", "source": "cve@mitre.org"}, {"url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10021", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device."}, {"lang": "es", "value": "McAfee Enterprise Mobility Manager (EMM) Agent antes de v4.8 y EMM Server antes de v10.1, cuando est\u00e1 habilitado el modo OTP, tienen una dependencia en registros SRV de DNS, lo que hace que sea m\u00e1s f\u00e1cil descubrir contrase\u00f1as de usuario a atacantes remotos haciendo un ataque de spoofing del servidor EMM, tal y como lo demuestra una contrase\u00f1a escrita en un dispositivo iOS.\r\n"}], "lastModified": "2017-08-29T01:32:19.743", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mcafee:enterprise_mobility_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6DCCAEA-C934-4945-86FB-9E4A11C62FF7", "versionEndIncluding": "4.7"}, {"criteria": "cpe:2.3:a:mcafee:enterprise_mobility_manager_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2818ACB8-CD7A-46EB-AD25-F709EA1C779B", "versionEndIncluding": "10.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}