CVEvulnerability
CVE-2012-0297
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-05-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.
Affected configurations
• symantec web gateway 5.0
• symantec web gateway 5.0.1
• symantec web gateway 5.0.2
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/53444 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75731 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/bid/53444 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75731 exchange.xforce.ibmcloud.com