cnvd - cnvd-2020-52200

CNVD-2020-52200

Vulnerability from cnvd - Published: 2020-09-16

Title

McAfee Web Gateway权限提升漏洞（CNVD-2020-52200）

Description

McAfee Web Gateway是高性能安全Web网关,采用一个统一的设备软件架构,具有同类最佳的威胁防护。 McAfee Web Gateway 9.2.1之前版本存在权限提升漏洞。该漏洞源于用户界面访问控制不当。认证用户可利用该漏洞删除或下载受保护的日志数据。

Severity

中

Patch Name

McAfee Web Gateway权限提升漏洞（CNVD-2020-52200）的补丁

Patch Description

McAfee Web Gateway是高性能安全Web网关,采用一个统一的设备软件架构,具有同类最佳的威胁防护。 McAfee Web Gateway 9.2.1之前版本存在权限提升漏洞。该漏洞源于用户界面访问控制不当。认证用户可利用该漏洞删除或下载受保护的日志数据。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://kc.mcafee.com/corporate/index?page=content&id=SB10323

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-7295

Impacted products

Name
Mcafee McAfee Web Gateway <9.2.1

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-7295",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-7295"
    }
  },
  "description": "McAfee Web Gateway\u662f\u9ad8\u6027\u80fd\u5b89\u5168Web\u7f51\u5173,\u91c7\u7528\u4e00\u4e2a\u7edf\u4e00\u7684\u8bbe\u5907\u8f6f\u4ef6\u67b6\u6784,\u5177\u6709\u540c\u7c7b\u6700\u4f73\u7684\u5a01\u80c1\u9632\u62a4\u3002\n\nMcAfee Web Gateway 9.2.1\u4e4b\u524d\u7248\u672c\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7528\u6237\u754c\u9762\u8bbf\u95ee\u63a7\u5236\u4e0d\u5f53\u3002\u8ba4\u8bc1\u7528\u6237\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5220\u9664\u6216\u4e0b\u8f7d\u53d7\u4fdd\u62a4\u7684\u65e5\u5fd7\u6570\u636e\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://kc.mcafee.com/corporate/index?page=content\u0026id=SB10323",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-52200",
  "openTime": "2020-09-16",
  "patchDescription": "McAfee Web Gateway\u662f\u9ad8\u6027\u80fd\u5b89\u5168Web\u7f51\u5173,\u91c7\u7528\u4e00\u4e2a\u7edf\u4e00\u7684\u8bbe\u5907\u8f6f\u4ef6\u67b6\u6784,\u5177\u6709\u540c\u7c7b\u6700\u4f73\u7684\u5a01\u80c1\u9632\u62a4\u3002\r\n\r\nMcAfee Web Gateway 9.2.1\u4e4b\u524d\u7248\u672c\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7528\u6237\u754c\u9762\u8bbf\u95ee\u63a7\u5236\u4e0d\u5f53\u3002\u8ba4\u8bc1\u7528\u6237\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5220\u9664\u6216\u4e0b\u8f7d\u53d7\u4fdd\u62a4\u7684\u65e5\u5fd7\u6570\u636e\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "McAfee Web Gateway\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff08CNVD-2020-52200\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Mcafee McAfee Web Gateway \u003c9.2.1"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-7295",
  "serverity": "\u4e2d",
  "submitTime": "2020-09-16",
  "title": "McAfee Web Gateway\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\uff08CNVD-2020-52200\uff09"
}

CVE-2020-7295 (GCVE-0-2020-7295)

Vulnerability from cvelistv5 – Published: 2020-09-15 23:05 – Updated: 2024-08-04 09:25

Summary

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface.

Severity ?

3.5 (Low)


                        
                          CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE

CWE-287 - Improper Authentication

Assigner

trellix

References

URL

Tags

https://kc.mcafee.com/corporate/index?page=conten…

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	McAfee	McAfee Web Gateway (MWG)	Affected: unspecified , < 9.2.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:25:48.950Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10323"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "McAfee Web Gateway (MWG)",
          "vendor": "McAfee",
          "versions": [
            {
              "lessThan": "9.2.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-09-15T23:05:16",
        "orgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
        "shortName": "trellix"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10323"
        }
      ],
      "source": {
        "advisory": "SB10323",
        "discovery": "EXTERNAL"
      },
      "title": "Web Gateway (MWG) - Privilege Escalation vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@mcafee.com",
          "ID": "CVE-2020-7295",
          "STATE": "PUBLIC",
          "TITLE": "Web Gateway (MWG) - Privilege Escalation vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "McAfee Web Gateway (MWG)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "9.2.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "McAfee"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.5,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-287: Improper Authentication"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10323",
              "refsource": "MISC",
              "url": "https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10323"
            }
          ]
        },
        "source": {
          "advisory": "SB10323",
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "01626437-bf8f-4d1c-912a-893b5eb04808",
    "assignerShortName": "trellix",
    "cveId": "CVE-2020-7295",
    "datePublished": "2020-09-15T23:05:16",
    "dateReserved": "2020-01-21T00:00:00",
    "dateUpdated": "2024-08-04T09:25:48.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2020-52200

CVE-2020-7295 (GCVE-0-2020-7295)

Tags

Sightings

Nomenclature