CVE-2013-4671

2013-08-0113:32:21

CWE-352

[email protected]

web.nvd.nist.gov

cve-2013-4671

csrf

vulnerability

symantec web gateway

swg

management console

remote authenticated users

hijack authentication

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

JSON

Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

NVD

Node

symantecweb_gatewayRange≤5.1

symantecweb_gatewayMatch5.0

symantecweb_gatewayMatch5.0.1

symantecweb_gatewayMatch5.0.2

symantecweb_gatewayMatch5.0.3

symantecweb_gatewayMatch5.0.3.18

AND

symantecweb_gateway_appliance_8450Match-

symantecweb_gateway_appliance_8490Match-

CPENameOperatorVersion
symantec:web_gatewaysymantec web gatewayle5.1
symantec:web_gatewaysymantec web gatewayeq5.0
symantec:web_gatewaysymantec web gatewayeq5.0.1
symantec:web_gatewaysymantec web gatewayeq5.0.2
symantec:web_gatewaysymantec web gatewayeq5.0.3
symantec:web_gatewaysymantec web gatewayeq5.0.3.18
symantec:web_gateway_appliance_8450symantec web gateway appliance 8450eq-
symantec:web_gateway_appliance_8490symantec web gateway appliance 8490eq-

CPE	Name	Operator	Version
symantec:web_gateway	symantec web gateway	le	5.1
symantec:web_gateway	symantec web gateway	eq	5.0
symantec:web_gateway	symantec web gateway	eq	5.0.1
symantec:web_gateway	symantec web gateway	eq	5.0.2
symantec:web_gateway	symantec web gateway	eq	5.0.3
symantec:web_gateway	symantec web gateway	eq	5.0.3.18
symantec:web_gateway_appliance_8450	symantec web gateway appliance 8450	eq	-
symantec:web_gateway_appliance_8490	symantec web gateway appliance 8490	eq	-