Unscored CVE-2012-4594 EUVD-2012-4519GHSA-v27p-mv6r-mg8c

McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain se…

Published Aug 22, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass intended access restrictions, and obtain sensitive information from arbitrary reporting panels, via a modified ID value in a console URL.

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10025
mcafee-epolicy-idvalue-info-disc(78132) vdb-entry