Vulnerability in Mcafee Email And Web Security

CVE-2012-4585

McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.

EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.

Affected products

Mcafee Email_and_web_security — versions 5.0, 5.5, 5.6
Mcafee Email_gateway — versions 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)