What’s Vulnerable › Vulnerabilities

CVE-2011-5100

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-08-22 · updated 2026-06-16
• Weakness: CWE-287

Description

The web interface in McAfee Firewall Reporter before 5.1.0.13 does not properly implement cookie authentication, which allows remote attackers to obtain access, and disable anti-virus functionality, via an HTTP request.

Affected products

• McAfee Firewall Reporter: through 5.1.0.6

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10015
• https://kc.mcafee.com/corporate/index?page=content&id=SB10015

Get alerted when CVE-2011-5100 or the next vulnerability affects your stack