Enterprise Mobility Manager Agent

DATE	CVE	VULNERABILITY TITLE	RISK
2012-08-22	CVE-2012-4588	Credentials Management vulnerability in Mcafee products McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid usernames presented in failed login attempts, and place them on a list of accounts that an administrator may wish to unlock, which allows remote attackers to cause a denial of service (excessive list size in the EMM Database) via a long sequence of login attempts with different usernames. network mcafee CWE-255	4.3
2012-08-22	CVE-2012-4587	Permissions, Privileges, and Access Controls vulnerability in Mcafee products McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1, when one-time provisioning (OTP) mode is enabled, have an improper dependency on DNS SRV records, which makes it easier for remote attackers to discover user passwords by spoofing the EMM server, as demonstrated by a password entered on an iOS device. network mcafee CWE-264	3.5