CVE-2012-4588: Medium severity McAfee Enterprise Mobility Manager vulnerability
McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4588?
CVE-2012-4588 is categorized as a moderate severity vulnerability that could lead to a denial of service.
How do I fix CVE-2012-4588?
To remediate CVE-2012-4588, upgrade the McAfee Enterprise Mobility Manager Agent to version 4.8 or later, and the Server to version 10.1 or later.
Which versions are affected by CVE-2012-4588?
CVE-2012-4588 affects McAfee Enterprise Mobility Manager Agent versions prior to 4.8 and Server versions prior to 10.1.
What issue does CVE-2012-4588 pose to users?
CVE-2012-4588 allows attackers to exploit the logging of invalid usernames, potentially resulting in a denial of service through excessive request handling.
How can administrators prevent exploitation of CVE-2012-4588?
Administrators can prevent exploitation of CVE-2012-4588 by ensuring their systems are updated to the latest software versions as indicated in the vulnerability report.