CVE-2018-6677: McAfee Web Gateway (MWG) - Directory Traversal vulnerability

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-23 · updated 2026-06-17
Weakness: CWE-22

Description

Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain elevated privileges via unspecified vectors.

Affected products

McAfee Web Gateway: 7.8.1.0

References

http://www.securityfocus.com/bid/104893
https://kc.mcafee.com/corporate/index?page=content&id=SB10245
http://www.securityfocus.com/bid/104893
https://kc.mcafee.com/corporate/index?page=content&id=SB10245

Get alerted when CVE-2018-6677 or the next vulnerability affects your stack