Information disclosure in Mcafee Enterprise Mobility Manager

CVE-2012-4591

About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

Affected products

Mcafee Enterprise_mobility_manager — versions 4.7
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)