CVE-2010-2116

high

Description

The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-2132

http://www.vupen.com/english/advisories/2010/1239

http://www.securitytracker.com/id?1024018

http://www.cybsec.com/vuln/cybsec_advisory_2010_0501_Ironmail_Advisory_Web_Access_Broken.pdf

http://secunia.com/advisories/39881

http://osvdb.org/64832

Details

Source: Mitre, NVD

Published: 2010-05-28

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00546