CVEvulnerability
CVE-2014-6064
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.
Affected configurations
• mcafee web gateway (>= 7.3.0 < 7.3.2.9)
• mcafee web gateway (>= 7.4.0 < 7.4.2)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securitytracker.com/id/1030675 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95690 VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10080 Vendor Advisory
- http://www.securitytracker.com/id/1030675 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95690 VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10080 Vendor Advisory