CVE-2014-2535: Path Traversal
Directory traversal vulnerability in McAfee Web Gateway (MWG) 7.4.x before 7.4.1, 7.3.x before 7.3.2.6, and 7.2.0.9 and earlier allows remote authenticated users to read arbitrary files via a crafted request to the web filtering port.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2535?
CVE-2014-2535 is categorized as a medium severity vulnerability due to its potential to allow unauthorized access to sensitive files.
How do I fix CVE-2014-2535?
To fix CVE-2014-2535, update McAfee Web Gateway to version 7.4.1 or later, 7.3.2.6 or later, or 7.2.0.9 or later.
What systems are affected by CVE-2014-2535?
CVE-2014-2535 affects McAfee Web Gateway versions 7.2.0.9 and earlier, 7.3.2.6 and earlier, and 7.4.0 and earlier.
Who can exploit the CVE-2014-2535 vulnerability?
Remote authenticated users can exploit CVE-2014-2535 to read arbitrary files through crafted requests.
What is a directory traversal vulnerability in the context of CVE-2014-2535?
In the context of CVE-2014-2535, a directory traversal vulnerability allows attackers to access files and directories outside the intended file system path.