Lucene search
PRIOn knowledge basePRION:CVE-2013-4671HistoryAug 01, 2013 - 1:32 p.m.
Cross site request forgery (csrf)
2013-08-0113:32:00
PRIOn knowledge base
www.prio-n.com
3
Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| web_gateway | le | 5.1 | |
| web_gateway | eq | 5.0 | |
| web_gateway | eq | 5.0.1 | |
| web_gateway | eq | 5.0.2 | |
| web_gateway | eq | 5.0.3 | |
| web_gateway | eq | 5.0.3.18 |
References
osvdb.org/95699
packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html
www.securityfocus.com/bid/61102
www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00
www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt
Related
nvd
nvd
CVE-2013-4671
2013-08-01 13:32:21
cve
cve
CVE-2013-4671
2013-08-01 13:32:21
cvelist
cvelist
CVE-2013-4671
2013-07-31 15:00:00
openvas
openvas
Symantec Web Gateway Multiple Vulnerabilities (Aug 2013)
2013-08-06 00:00:00
securityvulns
securityvulns
SEC Consult SA-20130726-0 :: Multiple vulnerabilities - Surveillance via Symantec Web Gateway
2013-07-29 00:00:00
Symantec Web Gateway multiple security vulnerabilities
2013-07-29 00:00:00
nessus
nessus
Symantec Web Gateway < 5.1.1 Multiple Vulnerabilities (SYM13-008)
2013-08-06 00:00:00
Symantec Web Gateway < 5.1.1 Multiple Vulnerabilities (SYM13-008)
2013-08-01 00:00:00
packetstorm
packetstorm
Symantec Web Gateway XSS / CSRF / SQL Injection / Command Injection
2013-07-26 00:00:00
exploitpack
exploitpack
Symantec Web Gateway 5.1.0.x - Multiple Vulnerabilities
2013-07-27 00:00:00
exploitdb
exploitdb
Symantec Web Gateway 5.1.0.x - Multiple Vulnerabilities
2013-07-27 00:00:00
symantec
symantec
Symantec Web Gateway Security Issues
2013-07-25 08:00:00