McAfee Web Gateway < 7.3.2.6 / 7.4.1 Information Disclosure (SB10063)

The remote host is running a version of McAfee Web Gateway prior to 7.3.2.6 / 7.4.1. It is, therefore, affected by an information disclosure vulnerability. A remote attacker could potentially exploit this vulnerability to download any file from the device that the user 'mwg' has access to. C...

CVE-2014-2535

McAfee Web Gateway (MWG) is affected by a directory traversal vulnerability that allows remote authenticated users to read arbitrary files via requests to the web filtering port. Affected versions are MWG 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier. The root cause is a direc...