CVE-2010-2116
No fix known EPSS 2%
The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.
Products: mcafee email_gateway, mcafee secure_mail