CVE-2012-4595

McAfee EWS <5.5.6 & MEG <7.0.2 - Auth Bypass

Title source: llm

Description

McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Gateway (MEG) 7.0.0 and 7.0.1, allows remote attackers to bypass authentication and obtain an admin session ID via unspecified vectors.

Scores

EPSS 0.0035
EPSS Percentile 57.0%

Classification

CWE
CWE-287
Status draft

Affected Products (4)

mcafee/email_and_web_security
mcafee/email_and_web_security
mcafee/email_gateway
mcafee/email_gateway

Timeline

Published Aug 22, 2012
Tracked Since Feb 18, 2026