CVE-2012-0297 The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted...
HighCVSS 10.0
EPSS 73.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec web gateway | = 5.0 | No fix listed |
| symantec web gateway | = 5.0.1 | No fix listed |
| symantec web gateway | = 5.0.2 | No fix listed |
References
- 53444 vdb-entry
- www.symantec.com vendor-advisory
- symantec-web-file-include(75731) vdb-entry