VULNERABILITY INTELLIGENCE

CVE-2020-7293

CVSS score9 CRITICAL
EPSS probability0.66%
CISA KEVNot currently listed
Published2020-09-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface.

Weakness classification

  • CWE-287: Improper Authentication

Primary references