VulnerabilityModified
CVE-2014-6064
The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.
MEDIUM 4.0EPSS 1.31%
Does this matter?
Lower severity and a low EPSS score (1.31%). Track it; it rarely justifies an emergency change on its own.
Description
The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 1.31% probability · 69th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- mcafee/web gateway
- Source
- cve@mitre.org
References
- http://www.securitytracker.com/id/1030675Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95690VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10080Vendor Advisory
- http://www.securitytracker.com/id/1030675Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95690VDB Entry
- https://kc.mcafee.com/corporate/index?page=content&id=SB10080Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.