What is CVE-2020-7268?

CVE-2020-7268 is a medium-severity vulnerability in Mcafee Email Gateway, classified under Path Traversal. CVSS score: 4.3/10. Published 2020-09-16.

How severe is CVE-2020-7268?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Path Traversal in Mcafee Email Gateway

CVE-2020-7268

Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are outside of the restricted directory via external input to construct a path name that should be within a restricted directory.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Mcafee Email_gateway
Mcafee Email Gateway (Meg) — versions unspecified

Weakness classification (CWE)

CWE-22 — Path Traversal

References

trellixpsirt@trellix.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-7268?: CVE-2020-7268 is a medium-severity vulnerability in Mcafee Email Gateway, classified under Path Traversal. CVSS score: 4.3/10. Published 2020-09-16.
How severe is CVE-2020-7268?: Medium severity. CVSS v3 base score is 4.3 out of 10.