PT-2020-19532

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description A privilege escalation issue exists due to improper access controls in the user interface, allowing an authenticated user interface user to delete or download protected log data...

PT-2020-19531

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description A privilege escalation issue exists due to improper access controls in the REST interface, allowing an authenticated user interface user to delete or download protected files...

PT-2020-19530

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description The issue allows an authenticated user interface user with low permissions to escalate their privileges by changing the system's root password due to improper access controls in the user...

PT-2020-19534

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description The issue allows an authenticated user interface user to access protected dashboard data due to improper access control in the user interface. This is a result of a privilege escalation...

PT-2020-19533

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description A privilege escalation issue exists due to improper access control in the user interface, allowing an authenticated user interface user to access protected configuration files...

CVE-2020-7297: Improper Authentication

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user interface...

CVE-2020-7296: Improper Authentication

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user interface...

CVE-2020-7295: Improper Authentication

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface...

CVE-2020-7294: Improper Authentication

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST interface...

CVE-2020-7293: Improper Authentication

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface...

Unspecified Vulnerability in McAfee Web Gateway

McAfee Web Gateway MWG is a security gateway product from the U.S.-based McAfee. The product provides threat protection, application control, and data loss prevention. A security vulnerability exists in McAfee MWG versions prior to 9.2.1, which can be exploited by a remote attacker to cause MWG t...

CVE-2020-7292

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

CVE-2020-7292

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

CVE-2020-7292

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

CVE-2020-7292

CVE-2020-7292 affects McAfee Web Gateway (MWG) prior to version 9.2.1. The issue is an Inappropriate Encoding for Output Context , which can allow a remote attacker to cause MWG to return an ambiguous redirect response when a user clicks a malicious URL. The vulnerability is rooted in the output ...

CVE-2020-7292 Web Gateway (MWG) - Inappropriate Encoding for output context

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

PT-2020-19529

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description The issue allows a remote attacker to cause the McAfee Web Gateway to return an ambiguous redirect response by getting a user to click on a malicious URL. This is due to an inappropriate...

CVE-2020-7292: Inappropriate Encoding for Output Context

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

Simplifying Data Center and IaaS Visibility and Protection

Helping customers further secure their on-premises data centers and IaaS deployments is an interesting new use case for our Enterprise Threat Protector service. Enterprises typically have a significant number of applications that are deployed and run in these environments. I'm using the word...

Symantec Web Gateway 5.0.2.8 Remote Code Execution Exploit

Exploit for windows platform in category web applications Title: Postauth RCE in Symantec Web Gateway 5.0.2.8 Vendor: www.symantec.com Vulnerable software: www.symantec.com Repo: https://github.com/c610/free/ POST /spywall/timeConfig.php HTTP/1.1 Host: 192.168.216.133 User-Agent: Mozilla/5.0...