Vulnerability in Mcafee Smartfilter
CVE-2009-2312
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.003 (21.6th percentile) — read the EPSS interpretation.
Affected products
- Mcafee Smartfilter — versions 4.2.1.00
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)