Skip to content
OpenAdvisories
Critical · 9.0 CVE-2020-7293 EUVD-2020-28420GHSA-hw3r-8g7v-p8rq

Web Gateway (MWG) - Privilege Escalation vulnerability

Published Sep 15, 2020 · Updated Aug 4, 2024 · Assigned by trellix

Description

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.

Affected products

VendorProductAffectedFixed
McAfee McAfee Web Gateway (MWG) unspecified – < 9.2.1 9.2.1

References