CVE-2018-6678 — WEB Gateway vulnerability

3 documents3 sources
Severity
9.1CRITICALNVD
EPSS
0.4%
top 36.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mcafee WEB Gateway
Timeline
PublishedJul 23
Latest updateMay 13

Description

Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 2.3 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5mcafee/mcafee_web_gateway7.8.1 — 7.8.1*

🔴Vulnerability Details

2
GHSA
GHSA-c36j-5j37-4p9h: Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7↗2022-05-13
▶
CVEList
McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability↗2018-07-23
▶
CVE-2018-6678 — Mcafee WEB Gateway vulnerability | cvebase