CVE-2019-3635 MWG Proxy: Cross-Frame Scripting vulnerability
Attackers can exfiltrate sensitive data from McAfee Web Gateway users by crafting a webpage that triggers a cross-frame scripting vulnerability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-3635?
CVE-2019-3635 is a medium-severity cross-site scripting vulnerability in McAfee, LLC McAfee Web Gateway (MWG), published on 14 Aug 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Exfiltration of Data in McAfee Web Gateway (MWG) 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe.
Which versions are affected by CVE-2019-3635?
It affects 1 product.
Products include Mcafee Web Gateway.
How do I fix CVE-2019-3635?
No fix has been published for CVE-2019-3635 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2019-3635 being exploited?
There is no known exploitation of CVE-2019-3635 in the wild and no public exploit code.
Other vulnerabilities in McAfee, LLC McAfee Web Gateway (MWG)
- CVE-2021-23885 Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI
- CVE-2020-7293 Web Gateway (MWG) - Privilege Escalation vulnerability
- CVE-2019-3638 Web Gateway (MWG) - Reflected Cross Site Scripting vulnerability
- CVE-2019-3639 MWG UI: Cross-Frame Scripting vulnerability
- CVE-2022-1254 SWG URL redirection vulnerability
Sources
Also known as GHSA-6j3c-cmq4-m6hv.