CVE-2012-4588

medium Trellix
CVSS v3 Base Score
4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS Score
0.4%
Exploitation probability in 30 days
Top 37% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
None
Availability
P
Published: August 22, 2012 (5013 days ago)
Last Modified: April 29, 2026
Vendor: Trellix
Source: NVD

Description

McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames.

CWE

CWE-255

Affected Products

mcafee enterprise mobility managermcafee enterprise mobility manager agent

References

🔗 kc.mcafee.com 🔗 kc.mcafee.com