VYPR
← All advisories
Critical severity9.0NVD Advisory· Published Sep 15, 2020· Updated Jun 17, 2026

CVE-2020-7293

CVE-2020-7293

Description

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.

Affected products

3
  • McAfee/Web Gateway2 versions
    cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*range: >=7.8.0,<7.8.2.23
    • (no CPE)range: <9.2.1
  • McAfee/McAfee Web Gateway (MWG)v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.