VULNERABILITY INTELLIGENCE
CVE-2010-2116
CVSS score6.5 MEDIUM
EPSS probability2.31%
CISA KEVNot currently listed
Published2010-05-28
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Description
The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.
Weakness classification
- CWE-732: Incorrect Permission Assignment for Critical Resource
Primary references
- cve@mitre.org — Broken Link
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory