CVE-2020-7293

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.

Score

CVSS 3.1 9.0 Critical

Status

Modified - trellixpsirt@trellix.com

Published

2020-09-15

Last modified

2024-08-04

Weaknesses

CWE-287

Affected products

• Mcafee Web Gateway Mwg (Mcafee)
• Web Gateway (Mcafee)

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10323