CVE-2016-10258 Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the ma...
MediumCVSS 6.8
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom advanced secure gateway | >= 6.6, < 6.6.5.14 | 6.6.5.14 |
| broadcom advanced secure gateway | >= 6.7, < 6.7.3.1 | 6.7.3.1 |
| broadcom symantec proxysg | >= 6.5, < 6.5.10.8 | 6.5.10.8 |
| broadcom symantec proxysg | >= 6.6, < 6.6.5.14 | 6.6.5.14 |
| broadcom symantec proxysg | >= 6.7, < 6.7.3.1 | 6.7.3.1 |
| symantec Advanced Secure Gateway (ASG) | = 6.6 prior to 6.6.5.14 | No fix listed |
| symantec Advanced Secure Gateway (ASG) | = 6.7 prior to 6.7.3.1 | No fix listed |
| symantec ProxySG | = 6.5 prior to 6.5.10.8 | No fix listed |
| symantec ProxySG | = 6.6 prior to 6.6.5.14 | No fix listed |
| symantec ProxySG | = 6.7 prior to 6.7.3.1 | No fix listed |
References
- 103685 third-party-advisory vdb-entry
- 1040757 third-party-advisory vdb-entry
- www.symantec.com vendor-advisory