Lucene search
PRIOn knowledge basePRION:CVE-2012-0297HistoryMay 21, 2012 - 8:55 p.m.
Code injection
2012-05-2120:55:00
PRIOn knowledge base
www.prio-n.com
1
8.1 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| web_gateway | eq | 5.0.2 | |
| web_gateway | eq | 5.0 | |
| web_gateway | eq | 5.0.1 |
Related
zdi
zdi
dsquare
dsquare
Symantec Web Gateway 5.0.2 LFI
2012-06-09 00:00:00
Symantec Web Gateway 5.0.2 RCE
2012-06-09 00:00:00
nessus
nessus
securityvulns
securityvulns
ZDI-12-090 : Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability
2012-06-13 00:00:00
Symantec WebGateway security vulnerabilities
2012-06-13 00:00:00
saint
saint
Symantec Web Gateway access_log PHP Injection
2012-06-11 00:00:00
Symantec Web Gateway access_log PHP Injection
2012-06-11 00:00:00
Symantec Web Gateway access_log PHP Injection
2012-06-11 00:00:00
checkpoint_advisories
checkpoint_advisories
packetstorm
packetstorm
Symantec Web Gateway 5.0.2.8 Command Execution
2012-05-28 00:00:00
Symantec Web Gateway 5.0.2 Local File Inclusion
2012-05-26 00:00:00
Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection
2012-06-11 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_SYMWEBGW
2012-05-21 20:55:00
cve
cve
CVE-2012-0297
2012-05-21 20:55:00
attackerkb
attackerkb
CVE-2012-0297 Symantec Web Gateway Vulnerability
2012-05-21 00:00:00
exploitpack
exploitpack
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
2012-06-27 00:00:00
seebug
seebug
symantec web gateway 5.0.2.8 - Multiple Vulnerabilities
2014-07-01 00:00:00
openvas
openvas
Symantec Web Gateway Remote Shell Command Execution Vulnerability
2012-06-01 00:00:00
exploitdb
exploitdb
symantec Web gateway 5.0.2.8 - Multiple Vulnerabilities
2012-06-27 00:00:00
symantec
symantec
Symantec Web Gateway Multiple Security Issues
2012-05-17 08:00:00
8.1 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for PRION:CVE-2012-0297