CVE-2018-6667
CRITICAL
10.0
CVSS 3.0
Description
Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 allows remote attackers to execute arbitrary code via Java management extensions (JMX).
Metadata
Severity & Metrics
10.0
CRITICAL CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| McAfee | Web Gateway | x86 | 7.8.1.0 < unspecified, unspecified ≤ 7.8.1.5 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| — | cna | Authentication Bypass vulnerability |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 10.0 | CRITICAL | 3.0 | cna | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
References (3)