CVE-2018-6667

McAfee Web Gateway - Authentication Bypass vulnerability

State: Published
Severity: 10.0 Critical
Published: Jun 26, 2018
Updated: Aug 5, 2024
Reserved: Feb 6, 2018

Description

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX).

Scores

CVSS	Score	Vector	Source
3.0	10.0 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	trellix

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Web GatewayMcAfee	7.8.1.0 to before unspecifiedAffected 7.8.1.5 and earlierAffected

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10241
1041129vdb-entry
104564vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.