Unscored severity · published Sep 2, 2014
CVE-2014-6064
The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user…
–
CVSS
1.3%
EPSS
No
On KEV
Description
The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WG
Web Gateway · Mcafee
7.3.0 before 7.3.2.9; 7.4.0 before 7.4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6064
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6064
Third Party Advisory
http://www.securitytracker.com/id/1030675
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95690
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10080
More from Web Gateway
7.8
CVE-2021-3156
Sudo Heap-Based Buffer Overflow Vulnerability
9.8
CVE-2019-9169
In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression…
9.8
CVE-2018-18311
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations
9.8
CVE-2016-4448
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors
9.6
CVE-2019-3638
Reflected Cross Site Scripting vulnerability in Administrators web console in McAfee Web Gateway (MWG) 7.8.x prior to 7.8.2.13 allows remote attackers to collect sensitive…