CVE-2012-2976

2012-07-2317:55:03

CWE-78

[email protected]

web.nvd.nist.gov

cve-2012-2976

symantec

web gateway

remote code execution

injection issue

security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.9%

JSON

The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an “injection” issue.

Affected configurations

NVD

Node

symantecweb_gatewayMatch5.0

symantecweb_gatewayMatch5.0.1

symantecweb_gatewayMatch5.0.2

symantecweb_gatewayMatch5.0.3

CPENameOperatorVersion
symantec:web_gatewaysymantec web gatewayeq5.0
symantec:web_gatewaysymantec web gatewayeq5.0.1
symantec:web_gatewaysymantec web gatewayeq5.0.2
symantec:web_gatewaysymantec web gatewayeq5.0.3

CPE	Name	Operator	Version
symantec:web_gateway	symantec web gateway	eq	5.0
symantec:web_gateway	symantec web gateway	eq	5.0.1
symantec:web_gateway	symantec web gateway	eq	5.0.2
symantec:web_gateway	symantec web gateway	eq	5.0.3