Email Gateway CVE-2012-4585

MEDIUM

Permissions, Privileges, and Access Controls (CWE-264)

2012-08-22 cve@mitre.org

Privilege Escalation Email Gateway Email And Web Security Mcafee

4.0

CVSS 2.0 · NVD

Share

Severity by source

NVD PRIMARY

4.0 MEDIUM

AV:N/AC:L/Au:S/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Confidentiality

P

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Aug 22, 2012 - 10:42 cve.org

MEDIUM 4.0

DescriptionCVE.org

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.

AnalysisAI

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL. Affected products include: Mcafee Email And Web Security, Mcafee Email Gateway. Version information: before 5.5.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Email Gateway

View all

CVE-2013-7104 CRITICAL Act Now POC

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in

CVE-2013-7103 CRITICAL Act Now POC

McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacte

CVE-2013-7092 MEDIUM This Month POC

Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authen

CVE-2013-6349 HIGH This Week

McAfee Email Gateway (MEG) 7.0 before 7.0.4 and 7.5 before 7.5.1 allows remote authenticated users to execute arbitrary

CVE-2012-4595 HIGH This Week

McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 an

CVE-2012-4581 MEDIUM This Month

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 be

CVE-2016-8005 MEDIUM This Month

File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attack

CVE-2016-3969 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when File Filtering is enab

CVE-2012-4582 MEDIUM This Month

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 be

CVE-2012-4580 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Pa

CVE-2012-4597 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patc

CVE-2012-4596 MEDIUM This Month

Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authenticated users to byp

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all

CVE-2013-0422 CRITICAL POC

CVE-2016-10372 CRITICAL POC

CVE-2014-9583 CRITICAL POC

CVE-2012-0297 CRITICAL POC

CVE-2015-7709 CRITICAL POC

CVE-2014-0514 CRITICAL POC

CVE-2013-6955 CRITICAL POC

CVE-2012-0299 CRITICAL POC

Same technique Privilege Escalation

View all

CVE-2024-0012 CRITICAL POC

CVE-2025-47812 CRITICAL POC

CVE-2013-0422 CRITICAL POC

CVE-2013-0632 CRITICAL POC

CVE-2024-9474 MEDIUM POC

CVE-2017-5689 CRITICAL POC

CVE-2021-20021 CRITICAL POC

CVE-2017-12635 CRITICAL POC

Share

CVE-2012-4585 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy