{"id":"CVE-2014-6064","aliases":["EUVD-2014-5951","GHSA-8wc2-9p9q-667f"],"status":"published","title":"The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9...","description":"The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01306,"percentile":0.70718,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2014-09-02T14:00:00Z","modified":"2026-06-17T00:12:31Z","products":[{"vendor":"mcafee","product":"web_gateway"}],"references":[{"url":"http://www.securitytracker.com/id/1030675","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10080","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95690","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-6064"},{"url":"https://github.com/advisories/GHSA-8wc2-9p9q-667f"}],"sources":{"cve":[{"id":"CVE-2014-6064","description":"The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.","status":"published","published":"2014-09-02T14:00:00Z","modified":"2024-08-06T12:03:02.331Z","updated_at":"2026-11-02T14:33:45.263043Z"}],"euvd":[{"id":"EUVD-2014-5951","description":"The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.","status":"published","published":"2014-09-02T14:00:00Z","modified":"2024-08-06T12:03:02Z","updated_at":"2026-11-03T01:57:00.425792Z"}],"ghsa":[{"id":"GHSA-8wc2-9p9q-667f","title":"The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9...","description":"The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.","status":"published","published":"2022-05-14T01:47:40Z","modified":"2023-02-02T05:04:32Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:51:53.84386Z"}],"nvd":[{"id":"CVE-2014-6064","description":"The Accounts tab in the administrative user interface in McAfee Web Gateway (MWG) before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors.","status":"published","published":"2014-09-02T14:55:03.997Z","modified":"2026-06-17T00:12:31.943Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:55.540337Z"}]}}