CVE-2016-10258

2018-04-1000:00:00

symantec

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.3%

JSON

Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code.

CNA Affected

[
  {
    "product": "Advanced Secure Gateway (ASG)",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "6.6 prior to 6.6.5.14"
      },
      {
        "status": "affected",
        "version": "6.7 prior to 6.7.3.1"
      }
    ]
  },
  {
    "product": "ProxySG",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "6.5 prior to 6.5.10.8"
      },
      {
        "status": "affected",
        "version": "6.6 prior to 6.6.5.14"
      },
      {
        "status": "affected",
        "version": "6.7 prior to 6.7.3.1"
      }
    ]
  }
]