CVE-2021-23885

Published: Feb 17, 2021Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page.

Affected (3)

Products: Mcafee: Web Gateway

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mcafee Web Gateway	Before 8.2.17
Mcafee Web Gateway	From 10.0 to 10.0.4
Mcafee Web Gateway	From 9.2 to 9.2.8

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10349

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10349

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.