The web interface in McAfee Email Gateway (formerly IronMail) 6.7.1 allows remote authenticated users, with only Read privileges, to gain Write privileges to modify configuration via the save action in a direct request to admin/systemWebAdminConfig.do.
| Software | From | Fixed in |
|---|---|---|
| mcafee / secure_mail | 6.7.1 | 6.7.1.x |
| mcafee / email_gateway | 6.7.1 | 6.7.1.x |