Remote Code Execution Vulnerability in Symantec Web Gateway Appliances
CVE-2015-5690

Currently unrated

Key Information:

Vendor
Symantec
Status
Web Gateway
Vendor
CVE Published:
20 September 2015

Summary

A vulnerability in the management console of Symantec Web Gateway appliances allows remote authenticated users to bypass access restrictions. This flaw can be exploited by leveraging a crafted redirect, enabling unauthorized execution of arbitrary commands. The risk associated with this vulnerability emphasizes the need for immediate security measures to protect affected systems.

References

http://www.securitytracker.com/id/1033625
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/76725
vdb-entryx_refsource_BID
http://www.zerodayinitiative.com/advisories/ZDI-15-444/
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.