{ "schema_version": "1.4.0", "id": "GHSA-fr8v-wj33-r9jw", "modified": "2022-05-17T05:19:34Z", "published": "2022-05-17T05:19:34Z", "aliases": [ "CVE-2012-4584" ], "details": "McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, does not properly encrypt system-backup data, which makes it easier for remote authenticated users to obtain sensitive information by reading a backup file, as demonstrated by obtaining password hashes.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4584" }, { "type": "WEB", "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10020" }, { "type": "WEB", "url": "http://archives.neohapsis.com/archives/bugtraq/2012-03/0162.html" } ], "database_specific": { "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2012-08-22T10:42:00Z" } }