VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Sep 15, 2020· Updated Jun 17, 2026

CVE-2020-7294

CVE-2020-7294

Description

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected files via improper access controls in the REST interface.

Affected products

3
  • McAfee/Web Gateway2 versions
    cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*range: >=7.8.0,<7.8.2.23
    • (no CPE)range: <9.2.1
  • McAfee/McAfee Web Gateway (MWG)v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.