CVE-2012-4587

McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency…

published August 22, 2012

CVSS
—
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00852 · 57.6th percentile
Published
2012-08-22T10:00Z
EPSS history
Timeline
  • 22 AUG 10:00Z
    McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency…
    cvelistv5