{"id":"CVE-2020-7295","state":"PUBLISHED","title":"Web Gateway (MWG) - Privilege Escalation vulnerability","description":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.","publishedAt":"2020-09-15T23:05:16.000Z","updatedAt":"2024-08-04T09:25:48.950Z","severity":{"score":3.5,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","source":"trellix"},"assigner":"trellix","products":["McAfee McAfee Web Gateway (MWG)"],"affected":[{"vendor":"McAfee","product":"McAfee Web Gateway (MWG)","versions":[{"version":"unspecified","status":"affected","lessThan":"9.2.1","versionType":"custom"}]}],"references":["https://kc.mcafee.com/corporate/index?page=content&id=SB10323"],"weaknesses":["CWE-287"],"ingestedAt":"2026-10-29T19:47:41.446Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/7xxx/CVE-2020-7295.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-7295","state":"PUBLISHED","datePublished":"2020-09-15T23:05:16.000Z","dateUpdated":"2024-08-04T09:25:48.950Z","assignerShortName":"trellix","assignerOrgId":"01626437-bf8f-4d1c-912a-893b5eb04808","dateReserved":"2020-01-21T00:00:00.000Z"},"containers":{"cna":{"title":"Web Gateway (MWG) - Privilege Escalation vulnerability","descriptions":[{"lang":"en","value":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface."}],"affected":[{"vendor":"McAfee","product":"McAfee Web Gateway (MWG)","versions":[{"version":"unspecified","status":"affected","lessThan":"9.2.1","versionType":"custom"}]}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10323","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-287","description":"CWE-287: Improper Authentication","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"trellix","dateUpdated":"2020-09-15T23:05:16.000Z","orgId":"01626437-bf8f-4d1c-912a-893b5eb04808"},"source":{"advisory":"SB10323","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@mcafee.com","ID":"CVE-2020-7295","STATE":"PUBLIC","TITLE":"Web Gateway (MWG) - Privilege Escalation vulnerability"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"McAfee Web Gateway (MWG)","version":{"version_data":[{"version_affected":"<","version_value":"9.2.1"}]}}]},"vendor_name":"McAfee"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":3.5,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-287: Improper Authentication"}]}]},"references":{"reference_data":[{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10323","refsource":"MISC","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10323"}]},"source":{"advisory":"SB10323","discovery":"EXTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10323","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T09:25:48.950Z"}}]}}}