CVE-2012-4599

EUVD-2012-4524 · Published Aug 22, 2012

McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.

Technologies

Mcafee Smartfilter Administration

Weaknesses

CWE-287

CVSS scores

v2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10029

Potentially impacted assets

See if this affects your attack surface