← Back

CVE-2020-7296

nvd nist
Published: Sep 15, 2020Modified: Nov 21, 2024

JSON object

Loading...
5.7
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.1 / Impact: 3.6
Source: NVD

Description

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user interface.

Affected (3)

Products: Mcafee: Web Gateway
Mcafee
1 product
Web Gateway
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Mcafee
Web Gateway
From 7.8.0 to 7.8.2.23
Web Gateway
From 8.2.0 to 8.2.11
Web Gateway
From 9.0.0 to 9.2.3

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

Source: trellixpsirt@trellix.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.