CVE-2020-7268: McAfee Email Gateway (MEG) - Path Traversal vulnerability

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-09-16 · updated 2026-06-17
Weakness: CWE-22

Description

Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or directories that are outside of the restricted directory via external input to construct a path name that should be within a restricted directory.

Affected products

Intel McAfee Email Gateway (MEG): before 7.6.406 — fixed in 7.6.406

How to fix

Upgrade to a fixed version: Intel McAfee Email Gateway (MEG) 7.6.406. Check the vendor advisory for mitigations.

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10323
https://kc.mcafee.com/corporate/index?page=content&id=SB10323

Get alerted when CVE-2020-7268 or the next vulnerability affects your stack