Vulnerability in Mcafee Email And Web Security
CVE-2012-4584
McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.009 (54.5th percentile) — read the EPSS interpretation.
Affected products
- Mcafee Email_and_web_security — versions 5.0, 5.5, 5.6
- Mcafee Email_gateway — versions 7.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)