Back to CVE Browser

CVE-2018-6667

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0240%

EPSS Percentile23.45th

PublishedJun 26, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX).

Affected Platforms (CPE)

📦

Mcafee

Mcafee Web Gateway

>= 7.8.1.0 and <= 7.8.1.5

References & Advisories

🔗 http://www.securityfocus.com/bid/104564

🔗 http://www.securitytracker.com/id/1041129

🔗 https://kc.mcafee.com/corporate/index?page=content&id=SB10241

🔗 http://www.securityfocus.com/bid/104564

🔗 http://www.securitytracker.com/id/1041129

🔗 https://kc.mcafee.com/corporate/index?page=content&id=SB10241

Related Vulnerabilities

CVE-2018-66789.1

Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allow...

CVE-2018-66779.1

Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticate...

CVE-2020-72939.0

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user with low pe...

CVE-2021-238859.0

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privil...