McAfee Smartfilter vulnerabilities

2 CVEs affecting McAfee Smartfilter, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-2429, published 2009-07-10.

More from McAfee.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-2429, published 2009-07-10. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. …
• CVE-2009-2312, published 2009-07-02. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.