CVE-2012-4591

Published: Aug 22, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name of the user account for an IIS worker process, which allows remote attackers to obtain potentially sensitive information by visiting this page.

Affected (2)

Products: Mcafee: Enterprise Mobility Manager

Mcafee

1 product

Enterprise Mobility Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mcafee Enterprise Mobility Manager	Up to 9.6
Mcafee Enterprise Mobility Manager	Version 4.7

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/78221

Source: cve@mitre.org

https://kc.mcafee.com/corporate/index?page=content&id=SB10022

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/78221

Source: af854a3a-2127-422b-91ae-364da2661108

https://kc.mcafee.com/corporate/index?page=content&id=SB10022

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.