CVE-2018-6667

CVE-2018-6667 affects McAfee Web Gateway 7.8.1.0–7.8.1.5, where an authentication bypass in the administrative UI allows remote attackers to execute arbitrary code via Java Management Extensions (JMX). The root cause is an authentication bypass in the web management interface, enabling unauthenti...

CVE-2018-6678

CVE-2018-6678 affects McAfee Web Gateway (MWG) 7.8.1.x. The vulnerability exists in the administrative interface and allows authenticated administrator users to execute arbitrary commands via unspecified vectors (configuration/environment manipulation). Connected documents consistently describe M...

CVE-2018-6677

Affected product : McAfee Web Gateway (MWG) 7.8.1.x. Vulnerability : Directory Traversal in the administrative user interface that enables authenticated administrator users to gain elevated privileges via unspecified vectors. The core impact is privilege escalation within MWG. What is vulnerable ...

CVE-2019-3581

CVE-2019-3581 affects McAfee Web Gateway’s proxy component (7.8.2.0 and later) via improper input validation. The vulnerability allows remote denial of service through crafted HTTP request parameters. Connected sources corroborate the product, component, and impact but do not provide exploit deta...