What is the severity of CVE-2012-2212?

The severity of CVE-2012-2212 is disputed due to a lack of reproducibility in testing.

How do I fix CVE-2012-2212?

To fix CVE-2012-2212, ensure that your McAfee Web Gateway 7.0 is configured to validate the Host HTTP header properly.

Who is affected by CVE-2012-2212?

CVE-2012-2212 affects users of McAfee Web Gateway version 7.0.0.

What type of vulnerability is CVE-2012-2212?

CVE-2012-2212 is a vulnerability that allows attackers to bypass access controls via manipulation of the Host HTTP header.

Can CVE-2012-2212 be exploited remotely?

Yes, CVE-2012-2212 can be exploited remotely by attackers targeting the affected McAfee Web Gateway.

Vulnerability/
CVE-2012-2212

medium

CWE

264

28/4/2012

3/10/2022

6/8/2024

CVE-2012-2212

First published: Sat Apr 28 2012(Updated: )

** DISPUTED ** McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary allowed hostname in the Host HTTP header. NOTE: this issue might not be reproducible, because the researcher did not provide configuration details for the vulnerable system, and the observed behavior might be consistent with a configuration that was (perhaps inadvertently) designed to allow access based on Host HTTP headers.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
McAfee Web Gateway Cloud Service	=7.0.0

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-2212?
The severity of CVE-2012-2212 is disputed due to a lack of reproducibility in testing.
How do I fix CVE-2012-2212?
To fix CVE-2012-2212, ensure that your McAfee Web Gateway 7.0 is configured to validate the Host HTTP header properly.
Who is affected by CVE-2012-2212?
CVE-2012-2212 affects users of McAfee Web Gateway version 7.0.0.
What type of vulnerability is CVE-2012-2212?
CVE-2012-2212 is a vulnerability that allows attackers to bypass access controls via manipulation of the Host HTTP header.
Can CVE-2012-2212 be exploited remotely?
Yes, CVE-2012-2212 can be exploited remotely by attackers targeting the affected McAfee Web Gateway.

agent/type
agent/first-publish-date
agent/references
agent/severity
agent/weakness
agent/author
agent/status
agent/softwarecombine
agent/description
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
agent/software-canonical-lookup
status/disputed
vendor/mcafee
canonical/mcafee web gateway cloud service
version/mcafee web gateway cloud service/7.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.