NetSight
medium4.3

CVE-2020-7292

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous…

Impact

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.

Affected products

VendorProductAffected versions
McafeeWeb Gateway
from 7.8.0 before 7.8.2.22
from 8.2.0 before 8.2.9
from 9.0.0 before 9.2.1

Weakness classification

References