CVE-2019-3639

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:42

Type Values Removed Values Added
References () https://kc.mcafee.com/corporate/index?page=content&id=SB10293 - () https://kc.mcafee.com/corporate/index?page=content&id=SB10293 -

07 Nov 2023, 03:10

Type Values Removed Values Added
References (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10293 - Vendor Advisory () https://kc.mcafee.com/corporate/index?page=content&id=SB10293 -

Information

Published : 2019-08-14 17:15

Updated : 2024-11-21 04:42


NVD link : CVE-2019-3639

Mitre link : CVE-2019-3639

CVE.ORG link : CVE-2019-3639


JSON object : View

Products Affected

mcafee

  • web_gateway
CWE
CWE-1021

Improper Restriction of Rendered UI Layers or Frames