Vulnerability CVE-2012-4599

Vulnerability CVE-2012-4599

Published: 2012-08-22

Description:

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
10/10	10/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Mcafee -> Smartfilter administration

References:

https://kc.mcafee.com/corporate/index?page=content&id=SB10029

Copyright 2024, cxsecurity.com