title: McAfee Web Gateway (MWG) - Configuration/Environment manipulation vulnerability
description: Configuration/Environment manipulation vulnerability in the administrative interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to execute arbitrary commands via unspecified vectors.
problem types: Configuration manipulation vulnerability
affected:
{
platforms: x86
product: McAfee Web Gateway (MWG)
vendor: McAfee
versions:
lessThan: 7.8.1*, status: affected, version: 7.8.1, versionType: custom
lessThan: 7.8.2*, status: unaffected, version: 7.8.2, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.4
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:L
version: 3.0
]