CVE-2020-7296: McAfee Web Gateway

Medium severity, CVSS 5.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user interface.

Affected products

• McAfee Web Gateway: from 7.8.0, before 7.8.2.23 (fixed in 7.8.2.23); from 8.2.0, before 8.2.11 (fixed in 8.2.11); from 9.0.0, before 9.2.3 (fixed in 9.2.3)

Published 2020-09-15. Last modified 2026-06-17.