Skip to content
OpenAdvisories
Medium · 4.3 CVE-2019-3635 EUVD-2019-13270GHSA-6j3c-cmq4-m6hv

MWG Proxy: Cross-Frame Scripting vulnerability

Published Aug 14, 2019 · Updated Aug 4, 2024 · Assigned by trellix

Description

Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe.

Affected products

VendorProductAffectedFixed
McAfee McAfee Web Gateway (MWG) 7.8.2.x – < 7.8.2.12 7.8.2.12

References