← back
CVE-2020-7295

Web Gateway (MWG) - Privilege Escalation vulnerability

CVSS 3.5 LOWEPSS 0.5%CWE-287
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.5EPSS 0.5%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
15 Sep 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →