CVE-2010-2116: Medium severity McAfee Secure Mail vulnerability
The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2116?
CVE-2010-2116 is considered a medium severity vulnerability due to its potential for unauthorized configuration modification.
What systems are affected by CVE-2010-2116?
CVE-2010-2116 affects McAfee Email Gateway and McAfee Secure Mail version 6.7.1.
How do I fix CVE-2010-2116?
To fix CVE-2010-2116, upgrade to a patched version of McAfee Email Gateway or McAfee Secure Mail that addresses this vulnerability.
What kind of access is required to exploit CVE-2010-2116?
Exploiting CVE-2010-2116 requires remote authenticated access with Read privileges.
What type of vulnerability is CVE-2010-2116?
CVE-2010-2116 is a privilege escalation vulnerability that allows users to gain unauthorized Write privileges.