McAfee Web Gateway < / 7.4.1 Information Disclosure (SB10063)

Medium Nessus Plugin ID 73137


The remote host is affected by an information disclosure vulnerability.


The remote host is running a version of McAfee Web Gateway prior to / 7.4.1. It is, therefore, affected by an information disclosure vulnerability. A remote attacker could potentially exploit this vulnerability to download any file from the device that the user 'mwg' has access to.


Upgrade to / 7.4.1 or later.

See Also

Plugin Details

Severity: Medium

ID: 73137

File Name: mcafee_web_gateway_SB10063.nasl

Version: $Revision: 1.7 $

Type: combined

Family: Misc.

Published: 2014/03/21

Modified: 2016/12/19

Dependencies: 73136

Risk Information

Risk Factor: Medium


Base Score: 5

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:mcafee:web_gateway

Required KB Items: Host/McAfee Web Gateway/Version, Host/McAfee Web Gateway/Display Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2014/01/28

Vulnerability Publication Date: 2014/02/24

Reference Information

CVE: CVE-2014-2535

BID: 66193

OSVDB: 104111