CVE-2012-4589: Low severity mcafee enterprise mobility manager vulnerability
Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4589?
CVE-2012-4589 has a medium severity rating due to its potential for exploitation through unattended workstations.
How do I fix CVE-2012-4589?
To mitigate CVE-2012-4589, upgrade to McAfee Enterprise Mobility Manager version 10.0 or later, which includes the fix.
What does CVE-2012-4589 affect?
CVE-2012-4589 affects McAfee Enterprise Mobility Manager versions prior to 10.0, specifically concerning the login form's lack of an auto-complete attribute.
What could an attacker do with CVE-2012-4589?
An attacker could potentially exploit CVE-2012-4589 to gain unauthorized access by leveraging an unattended workstation.
Is there a workaround for CVE-2012-4589 if I cannot upgrade?
There are no definitive workarounds for CVE-2012-4589, so upgrading to a secure version is strongly recommended.