CVE-2009-2312: McAfee Smartfilter

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.

Affected products

• McAfee Smartfilter: version 4.2.1.00 only

Published 2009-07-02. Last modified 2026-06-16.