Vulnerability Description
McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mcafee | Enterprise Mobility Manager | <= 4.7 |
| Mcafee | Enterprise Mobility Manager Agent | <= 10.0 |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78130
- https://kc.mcafee.com/corporate/index?page=content&id=SB10021Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78130
- https://kc.mcafee.com/corporate/index?page=content&id=SB10021Vendor Advisory
FAQ
What is CVE-2012-4587?
CVE-2012-4587 is a vulnerability with a CVSS score of 3.5 (LOW). McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easie...
How severe is CVE-2012-4587?
CVE-2012-4587 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-4587?
Check the references section above for vendor advisories and patch information. Affected products include: Mcafee Enterprise Mobility Manager, Mcafee Enterprise Mobility Manager Agent.