CVEvulnerability
CVE-2020-7293
9.0 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-09-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.0 CRITICAL — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.0 CRITICAL — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.7 HIGH — AV:A/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.
Affected configurations
• mcafee web gateway (>= 7.8.0 < 7.8.2.23)
• mcafee web gateway (>= 8.2.0 < 8.2.11)
• mcafee web gateway (>= 9.0.0 < 9.2.3)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness