Vulnerability Database

300,444

Total vulnerabilities in the database

CVE-2020-7294

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST interface.

  • Published: Sep 16, 2020
  • Updated: Apr 14, 2023
  • CVE: CVE-2020-7294
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.6
  • AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.1
  • AV:A/AC:L/Au:S/C:P/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mcafee / web_gateway 7.8.0 7.8.2.23
mcafee / web_gateway 8.2.0 8.2.11
mcafee / web_gateway 9.0.0 9.2.3