CVE-2012-4589

Published: Aug 22, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.

Affected (2)

Products: Mcafee: Enterprise Mobility Manager

1 product

Enterprise Mobility Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mcafee Enterprise Mobility Manager	Up to 9.6
Mcafee Enterprise Mobility Manager	Version 4.7

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/78223

Source: cve@mitre.org

https://kc.mcafee.com/corporate/index?page=content&id=SB10022

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78223

Source: af854a3a-2127-422b-91ae-364da2661108

https://kc.mcafee.com/corporate/index?page=content&id=SB10022

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.