PT-2020-19534 · Mcafee · Mcafee Web Gateway

Published 2020-09-15 · Updated 2022-07-01 · CVE-2020-7297

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1

Description The issue allows an authenticated user interface user to access protected dashboard data due to improper access control in the user interface. This is a result of a privilege escalation issue.

Recommendations For versions prior to 9.2.1, update to version 9.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the user interface to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2020-7297

Affected Products

Mcafee Web Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-7297 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7297 · Vendor Advisory
• https://t.me/cvenotify/32498 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10323 · Note