1027444

mcafee-ews-id-sec-bypass(77977)

https://kc.mcafee.com/corporate/index?page=content&id=SB10026

The version of the McAfee WebShield UI hosted on the remote web server is affected by an authentication bypass vulnerability. It is possible to get a valid session ID as the administrative user by making a specially crafted request to /cgi-bin/localadmin. A remote, unauthenticated attacker can exploit this to perform administrative actions. After gaining administrative privileges, an attacker can take complete control of the system.

CVE-2012-4595

high

Tenable Plugins

high