CVE-2019-3581: McAfee Web Gateway denial of service attack due to Improper Input Validation
Published Jan 9, 2019
·Updated
Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.
Affected Software
2 affected components
McAfee McAfee Web Gateway>=7.8.2.0<7.8.2.5
McAfee McAfee Web Gateway>=8.0.0.0<8.0.2.0
Remediation
Information
Update to MWG 7.8.2.5 or 8.0.2
Event History
Jan 9, 2019
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-3581?
CVE-2019-3581 is considered a high severity vulnerability due to its potential to cause a denial of service.
2
What versions of McAfee Web Gateway are affected by CVE-2019-3581?
CVE-2019-3581 affects McAfee Web Gateway versions 7.8.2.0 to 7.8.2.5 and 8.0.0.0 to 8.0.2.0.
3
How do I fix CVE-2019-3581?
To mitigate CVE-2019-3581, update McAfee Web Gateway to a version that is not affected, specifically later than 7.8.2.5 or 8.0.2.0.
4
What is the cause of CVE-2019-3581?
CVE-2019-3581 is caused by improper input validation in the proxy component of McAfee Web Gateway.
5
Can CVE-2019-3581 be exploited remotely?
Yes, CVE-2019-3581 can be exploited remotely through crafted HTTP request parameters.