NVD

Id
45958  
Name
CVE-2012-4587  
Description
McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-08-22  
Modified Date
2013-04-04  
Seq
2012-4587  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230920 45958 CVE-2012-4587 mcafee-emm-dnssrv-spoofing(78130)  View
230921 45958 CVE-2012-4587 https://kc.mcafee.com/corporate/index?page=content&id=SB10021  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28117 JVNDB-2012-003824 McAfee Enterprise Mobility Manager におけるユーザーパスワードを検出される脆弱性 McAfee Enterprise Mobility Manager (EMM) は、ワンタイムプロビジョニング (OTP) モードが有効になっている場合、DNS SRV レコード上に不適当な依存関係を持つため、ユーザーパスワードを検出される脆弱性が存在します。 CVE-2012-4587 57825 CVE-2012-4587 45958 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003824.html 2012-03-23 2012-08-24 View