Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: McAfee Web Gateway (MWG) 9.2.1 Clear all filters
TI-2020-05902 CVE-2020-7297 · GHSA-2q3v-57hj-r275

Web Gateway (MWG) - Privilege Escalation vulnerability

Priority LOW 26

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user interface.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00432 Published 2020-09-15 Fixed in 9.2.1 CWE-287
TI-2020-05901 CVE-2020-7296 · GHSA-qf6w-rfjw-57c3

Web Gateway (MWG) - Privilege Escalation vulnerability

Priority LOW 26

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user interface.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00432 Published 2020-09-15 Fixed in 9.2.1 CWE-287
TI-2020-05900 CVE-2020-7295 · GHSA-jp5w-5x2h-hp6v

Web Gateway (MWG) - Privilege Escalation vulnerability

Priority LOW 22

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.00464 Published 2020-09-15 Fixed in 9.2.1 CWE-287
TI-2020-05899 CVE-2020-7294 · GHSA-m6xf-x3pm-6ffw

Web Gateway (MWG) - Privilege Escalation vulnerability

Priority LOW 21

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST interface.

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.00389 Published 2020-09-15 Fixed in 9.2.1 CWE-287
TI-2020-05898 CVE-2020-7293 · GHSA-hw3r-8g7v-p8rq

Web Gateway (MWG) - Privilege Escalation vulnerability

Priority MEDIUM 40

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user in…

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.0066 Published 2020-09-15 Fixed in 9.2.1 CWE-287