CVEvulnerability
CVE-2013-4671
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Affected configurations
• symantec web gateway (<= 5.1)
• symantec web gateway 5.0
• symantec web gateway 5.0.1
• symantec web gateway 5.0.2
• symantec web gateway 5.0.3
• symantec web gateway 5.0.3.18
• symantec web gateway appliance 8450
• symantec web gateway appliance 8490
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/95699 osvdb.org
- http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html packetstormsecurity.com
- http://www.securityfocus.com/bid/61102 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 www.symantec.com
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt www.sec-consult.com
- http://osvdb.org/95699 osvdb.org
- http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html packetstormsecurity.com
- http://www.securityfocus.com/bid/61102 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00 www.symantec.com
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt www.sec-consult.com