Code injection

2020-07-1515:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.7%

JSON

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.

CPENameOperatorVersion
web_gatewayge9.0.0
web_gatewaylt9.2.1
web_gatewayge8.2.0
web_gatewaylt8.2.9
web_gatewayge7.8.0
web_gatewaylt7.8.2.22

Name	Operator	Version
web_gateway	ge	9.0.0
web_gateway	lt	9.2.1
web_gateway	ge	8.2.0
web_gateway	lt	8.2.9
web_gateway	ge	7.8.0
web_gateway	lt	7.8.2.22

References

kc.mcafee.com/corporate/index?page=content&id=SB10323