CVE-2016-10258

🗓️ 11 Apr 2018 14:00:00Reported by symantecType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 77 Views🌐 WEB

Unrestricted file upload vulnerability in Symantec ASG and ProxySG management consoles. Malicious admin can upload malicious files to the console, tricking other admins into executing code

Reporter	Title	Published	Views	Family All 8
0day.today	Symantec Advanced Secure Gateway (ASG) / ProxySG - Unrestricted File Upload Vulnerability	16 Sep 201900:00	–	zdt
CNVD	Symantec Advanced Secure Gateway and ProxySG Arbitrary File Upload Vulnerability	26 Apr 201800:00	–	cnvd
Cvelist	CVE-2016-10258	11 Apr 201814:00	–	cvelist
exploitpack	Symantec Advanced Secure Gateway (ASG) ProxySG - Unrestricted File Upload	16 Sep 201900:00	–	exploitpack
NVD	CVE-2016-10258	11 Apr 201814:29	–	nvd
Prion	Unrestricted file upload	11 Apr 201814:29	–	prion
Symantec	SA162: Multiple ASG and ProxySG Vulnerabilities	10 Apr 201808:00	–	symantec
Tenable Nessus	Symantec ProxySG 6.5 < 6.5.10.8 / 6.6 < 6.6.5.14 / 6.7.3 < 6.7.3.7 / 6.7.4 < 6.7.4.1 Multiple Vulnerabilities (SA162)	13 Apr 201800:00	–	nessus

NVD

Node

broadcom advanced_secure_gatewayRange6.6–6.6.5.14

broadcom advanced_secure_gatewayRange6.7–6.7.3.1

Node

broadcom symantec_proxysgRange6.5–6.5.10.8

broadcom symantec_proxysgRange6.6–6.6.5.14

broadcom symantec_proxysgRange6.7–6.7.3.1

[
  {
    "product": "Advanced Secure Gateway (ASG)",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "6.6 prior to 6.6.5.14"
      },
      {
        "status": "affected",
        "version": "6.7 prior to 6.7.3.1"
      }
    ]
  },
  {
    "product": "ProxySG",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "6.5 prior to 6.5.10.8"
      },
      {
        "status": "affected",
        "version": "6.6 prior to 6.6.5.14"
      },
      {
        "status": "affected",
        "version": "6.7 prior to 6.7.3.1"
      }
    ]
  }
]

Source	Link
symantec	www.symantec.com/security-center/network-protection-security-advisories/SA162
securitytracker	www.securitytracker.com/id/1040757
securityfocus	www.securityfocus.com/bid/103685

Parameter	Position	Path	Description	CWE
path	request body	cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm	Unrestricted file upload via CKEditor filemanager upload endpoint (ASG/ProxySG context) allowing upload of arbitrary files.	CWE-434
file	request body	cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm	Unrestricted file upload via CKEditor filemanager upload endpoint (ASG/ProxySG context) allowing upload of arbitrary files.	CWE-434

21 Nov 2024 02:43Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26

CVSS 36.8

EPSS0.10463

CWE-434