CVE-2020-7293: falha crítica em McAfee Web Gateway (MWG)
Web Gateway (MWG) - Privilege Escalation vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9epss 0.7%
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
McAfee · McAfee Web Gateway (MWG)CVEs relacionadas — McAfee Web Gateway (MWG)
No mesmo produto, das mais perigosas para as menos.
CVE-2018-6677HIGHMcAfee Web Gateway (MWG) - Directory Traversal vulnerabilityEPSS 2.1%CVE-2018-6678LOWMcAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerabilityEPSS 1.2%CVE-2020-7292MEDIUMWeb Gateway (MWG) - Inappropriate Encoding for output contextEPSS 0.9%CVE-2020-7295LOWWeb Gateway (MWG) - Privilege Escalation vulnerabilityEPSS 0.5%CVE-2020-7297MEDIUMWeb Gateway (MWG) - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2020-7296MEDIUMWeb Gateway (MWG) - Privilege Escalation vulnerabilityEPSS 0.4%