Server-Side Request Forgery Vulnerability in Symantec Messaging Gateway
CVE-2019-18379
7.3HIGH
What is CVE-2019-18379?
Symantec Messaging Gateway, before version 10.7.3, features a security flaw where an attacker can conduct server-side request forgery (SSRF). This vulnerability allows unauthorized crafting of requests from the backend server, potentially exposing internal services and resources that should be safeguarded from external access, especially those reachable via the loopback interface. Proper security measures should be implemented to mitigate risks associated with this vulnerability and ensure comprehensive protection of systems.
Affected Version(s)
Symantec Messaging Gateway prior to 10.7.3