VulnerabilityModified
CVE-2014-2535
Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port.
MEDIUM 4.0EPSS 2.13%
Does this matter?
Lower severity and a low EPSS score (2.13%). Track it; it rarely justifies an emergency change on its own.
Description
Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 2.13% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- mcafee/web gateway
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/56958Vendor Advisory
- http://www.securityfocus.com/bid/66193Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91772VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10063Vendor Advisory
- http://secunia.com/advisories/56958Vendor Advisory
- http://www.securityfocus.com/bid/66193Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91772VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10063Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.