PT-2020-19514 · Mcafee · Mcafee Email Gateway

Published 2020-09-16 · Updated 2022-01-06 · CVE-2020-7268

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Email Gateway (MEG) versions prior to 7.6.406

Description The issue allows remote attackers to access files or directories outside of the restricted directory by constructing a path name that should be within a restricted directory via external input.

Recommendations For versions prior to 7.6.406, update to version 7.6.406 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-7268

Affected Products

Mcafee Email Gateway

References · 3

• https://osv.dev/vulnerability/CVE-2020-7268 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7268 · Security Note
• https://kc.mcafee.com/corporate/index?page=content&id=SB10323 · Note