CVE:CVE-2012-4587
CNNVD:CNNVD-201208-406
McAfee Enterprise Mobility Manager (EMM) Agent 4.8之前版本和Server 10.1之前版本中存在漏洞，该漏洞源于一次性配置(OTP)启用时，不正确依赖DNS SRV记录。远程攻击者可利用该漏洞通过欺骗EMM服务器发现用户密码，如iOS设备上的输入密码。
solution:Upgrade mcafee enterprise_mobility_manager to a higher version than 4.7,and avoid the version (,4.7]; Upgrade mcafee enterprise_mobility_manager_agent to a higher version than 10.0,and avoid the version (,10.0]