PT-2018-17704 · Mcafee · Mcafee Web Gateway

Publicado 2018-06-26 · Atualizado 2019-10-09 · CVE-2018-6667

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions 7.8.1.0 through 7.8.1.5

Description The issue allows remote attackers to execute arbitrary code via Java management extensions (JMX) due to an Authentication Bypass vulnerability in the administrative user interface.

Recommendations For McAfee Web Gateway versions 7.8.1.0 through 7.8.1.5, consider disabling Java management extensions (JMX) until a patch is available to prevent remote attackers from executing arbitrary code.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-6667

Produtos afetados

Mcafee Web Gateway

Referências · 5

• https://kc.mcafee.com/corporate/index?page=content&id=SB10241 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6667 · Nota de Segurança
• http://securityfocus.com/bid/104564 · Nota
• http://securitytracker.com/id/1041129 · Nota
• https://osv.dev/vulnerability/CVE-2018-6667 · Aviso do Fabricante