McAfee Email and Web Security (EWS) 5.x before 5.5 Patch 6 and 5.6 before Patch 3, and McAfee Email Gateway (MEG) 7.0 before Patch 1, allows remote authenticated users to read arbitrary files via a crafted URL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Email_and_web_security | Mcafee | 5.0 (including) | 5.0 (including) |
| Email_and_web_security | Mcafee | 5.5 (including) | 5.5 (including) |
| Email_and_web_security | Mcafee | 5.6 (including) | 5.6 (including) |
| Email_gateway | Mcafee | 7.0 (including) | 7.0 (including) |