CVE-2019-3581 - McAfee Web Gateway denial of service attack due to Improper Input Validation

Back Back to CVE browser

HIGH

McAfee Web Gateway denial of service attack due to Improper Input Validation

Published Jan 9, 2019

7.5

HIGH

CVSS 3.0

EPSS 2.27%

Description

Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.

Affected products

Vendor McAfee Product McAfee Web Gateway Default
n/a
- Version
  7.8.2
  Status
  affected
  Constraints
  <7.8.2*
- Version
  7.8.2.5
  Status
  affected
  Constraints
  <7.8.2.5
- Version
  8.0
  Status
  affected
  Constraints
  <8.0*
- Version
  8.0.2
  Status
  affected
  Constraints
  <8.0.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

McAfee

McAfee Web Gateway

n/a

Version	Status	Constraints
7.8.2	affected	<7.8.2*
7.8.2.5	affected	<7.8.2.5
8.0	affected	<8.0*
8.0.2	affected	<8.0.2

Remediation

Vendor solution

Update to MWG 7.8.2.5 or 8.0.2

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

https://kc.mcafee.com/corporate/index?page=content&id=SB10264
x_refsource_CONFIRM

Link	Providers	Tags
https://kc.mcafee.com/corporate/index?page=content&id=SB10264		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Jan 9, 2019

Updated Aug 4, 2024

Reserved Jan 3, 2019

Link CVE-2019-3581

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-3581

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-3581