Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-7292 EUVD-2020-28419GHSA-hm27-4fw9-4w6f

Web Gateway (MWG) - Inappropriate Encoding for output context

Published Jul 15, 2020 · Updated Aug 4, 2024 · Assigned by trellix

Description

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.

Affected products

VendorProductAffectedFixed
McAfee McAfee Web Gateway (MWG) unspecified – < 9.2.1 9.2.1

References