CVE-2010-2116

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-05-28 · updated 2026-06-16
Weakness: CWE-732

Description

The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.

Affected products

Intel McAfee Email Gateway (MEG): 6.7.1
McAfee Secure Mail: 6.7.1

References

http://osvdb.org/64832
http://secunia.com/advisories/39881
http://www.cybsec.com/vuln/cybsec_advisory_2010_0501_Ironmail_Advisory_Web_Access_Broken.pdf
http://www.securitytracker.com/id?1024018
http://www.vupen.com/english/advisories/2010/1239
http://osvdb.org/64832
http://secunia.com/advisories/39881
http://www.cybsec.com/vuln/cybsec_advisory_2010_0501_Ironmail_Advisory_Web_Access_Broken.pdf
http://www.securitytracker.com/id?1024018
http://www.vupen.com/english/advisories/2010/1239

Get alerted when CVE-2010-2116 or the next vulnerability affects your stack