CVE-2012-4587

Published: Aug 22, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.

Affected (2)

Products: Mcafee: Enterprise Mobility Manager, Enterprise Mobility Manager Agent

2 products

Enterprise Mobility Manager

Enterprise Mobility Manager Agent

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mcafee Enterprise Mobility Manager	Up to 4.7
Mcafee Enterprise Mobility Manager Agent	Up to 10.0

Related CWEs

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/78130

Source: cve@mitre.org

https://kc.mcafee.com/corporate/index?page=content&id=SB10021

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78130

Source: af854a3a-2127-422b-91ae-364da2661108

https://kc.mcafee.com/corporate/index?page=content&id=SB10021

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.