Skip to content
OpenAdvisories
Critical · 9.0 CVE-2021-23885 EUVD-2021-10811GHSA-286x-xfxm-75r6

Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI

Published Feb 17, 2021 · Updated Aug 3, 2024 · Assigned by trellix

Description

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page.

Affected products

VendorProductAffectedFixed
McAfee,LLC McAfee Web Gateway (MWG) unspecified – < 9.2.8 9.2.8

References