CVE-2012-2976 The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" iss...
HighCVSS 10.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec web gateway | = 5.0 | No fix listed |
| symantec web gateway | = 5.0.1 | No fix listed |
| symantec web gateway | = 5.0.2 | No fix listed |
| symantec web gateway | = 5.0.3 | No fix listed |
References
- VU#108471 third-party-advisory
- 54427 vdb-entry
- www.symantec.com