What is CVE-2021-23885?

CVE-2021-23885 is a critical-severity vulnerability in Mcafee Web_gateway, classified under Improper Privilege Management. CVSS score: 9.0/10. Published 2021-02-17.

How severe is CVE-2021-23885?

Critical severity. CVSS v3 base score is 9.0 out of 10.

Privilege escalation in Mcafee Web_gateway

CVE-2021-23885

Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization o…

Vulnerability class: Privilege Escalation

EPSS: 0.011 (61.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H.

Affected products

Mcafee Web_gateway
Mcafee,llc Mcafee Web Gateway (Mwg) — versions unspecified

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2021-23885?: CVE-2021-23885 is a critical-severity vulnerability in Mcafee Web_gateway, classified under Improper Privilege Management. CVSS score: 9.0/10. Published 2021-02-17.
How severe is CVE-2021-23885?: Critical severity. CVSS v3 base score is 9.0 out of 10.