CVE-2022-2310

An authentication bypass vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.12, 9.x prior to 9.2.23, 8.x prior to 8.2.28, and controlled release 11.x prior to 11.2.1 allows a remote attacker to bypass authentication into the administration User Interface. This is possible because of...

The vulnerability of the microprogrammed network interface devices of Advanced Secure Gateway (ASG) and ProxySG, related to HTTP request processing flaws, allows attackers to execute the “HTTP request hijacking” attack.

The vulnerability of the Advanced Secure Gateway ASG and ProxySG’s microprogramming software lies in the shortcomings of their HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute an “HTTP request hijacking” attack...

CVE-2021-46825

Symantec Advanced Secure Gateway ASG and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web...

Symantec Advanced Secure Gateway 环境问题漏洞

Symantec Advanced Secure Gateway ASG is a security gateway appliance from Symantec Corporation. An environmental issue vulnerability exists in Symantec Advanced Secure Gateway ASG and ProxySG that stems from susceptibility to an HTTP asynchronous vulnerability. An attacker could exploit the...

PT-2022-3498 · Symantec · Proxysg +1

Name of the Vulnerable Software and Affected Versions: Symantec Advanced Secure Gateway ASG and ProxySG affected versions not specified Description: The issue is related to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy wit...

CVE-2021-36807

An authenticated user could potentially execute code via an SQLi vulnerability in the user portal of SG UTM before version 9.708 MR8...

Security Bulletin: Update Secure Gateway Client in IBM DataPower Gateway to address several CVEs

Summary Update the version of Node used by Secure Gateway Client component to address the listed CVEs. This issue affects only users of the Secure Gateway Client. Vulnerability Details CVEID: CVE-2020-1971 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer...

CVE-2021-30648

The Symantec Advanced Secure Gateway ASG and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance...

Symantec Advanced Secure Gateway 和 Symantec ProxySG 授权问题漏洞

Symantec Advanced Secure Gateway and Symantec ProxySG are both security gateway appliances from Symantec Corporation. An authorization issue vulnerability exists in Symantec Advanced Secure Gateway ASG and ProxySG web management consoles. An unauthenticated attacker could exploit this vulnerabili...

CVE-2020-12595

An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...

How to Configure ICA Session Timeout Values for Access Gateway Enterprise Edition Sessions

This article describes how to configure different ICA session timeout values for the same ICA-published resource when Access Gateway Enterprise Edition is using secure gateway proxy mode. This involves creating an additional ICA listener on each XenApp server, modifying the terminal server settin...

Broadcom ProxySG and Advanced Secure Gateway Session Hijacking Vulnerability

Broadcom Advanced Secure Gateway and ProxySG are both secure Web gateway devices from Broadcom. A session hijacking vulnerability exists in the management console in Broadcom Advanced Secure Gateway and ProxySG. A remote attacker could exploit this vulnerability to hijack the session of the...

CVE-2018-20687

An XML external entity XXE vulnerability in CommandCenterWebServices/.?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

CVE-2018-20687

An XXE vulnerability exists in Raritan CommandCenter Secure Gateway (CC-SG) before version 8.0.0, in CommandCenterWebServices/.*?wsdl. The flaw allows remote unauthenticated attackers to read arbitrary files or perform server-side request forgery (SSRF) via a crafted DTD in an XML request. Exploi...

Raritan CommandCenter Secure Gateway XML External Entity Injection Vulnerability

Raritan CommandCenter Secure Gateway CC-SG is a data center server management solution from Raritan. The product provides remote control, centralized authentication, authorization and logging. A code issue vulnerability exists in Raritan versions prior to 8.0.0. The vulnerability stems from an...

Raritan CommandCenter Secure Gateway Cross Site Scripting

I. VULNERABILITY ------------------------- XSS Vulnerability on Raritan CommandCenter Secure Gateway II. CVE REFERENCE ------------------------- - III. VENDOR ------------------------- https://www.raritan.com/support/product/commandcenter-secure-gateway IV. TIMELINE -------------------------...

Security Bulletin: IBM Secure Gateway is affected by two vulnerabilities

Summary Secure Gateway has addressed the following vulnerabilities: CVE-2019-4498 CVE-2019-4499 Vulnerability Details CVEID: CVE-2019-4498 DESCRIPTION: IBM Secure Gateway Service uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatio...

Security Bulletin: Secure Gateway is affected by a Denial of Service vulnerability (CVE-2019-5428)

Summary Secure Gateway has addressed the following vulnerability: CVE-2019-5428 Vulnerability Details CVEID: CVE-2019-5428 DESCRIPTION: Node.js jQuery module is vulnerable to a denial of service, caused by a prototype pollution flaw. By sending a specially-crafted request to inject properties on...

Security Bulletin: Secure Gateway is affected by multiple vulnerabilities

Summary Secure Gateway has addressed the following vulnerabilities: CVE-2019-1559 CVE-2019-5737 CVE-2019-5739 Vulnerability Details CVEID: CVE-2019-1559 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connectio...

Symantec Advanced Secure Gateway and ProxySG Authentication Bypass Vulnerability

Symantec Advanced Secure Gateway ASG and ProxySG are both security gateway appliances from Symantec USA. An authentication bypass vulnerability exists in Symantec ASG and ProxySG. A remote attacker could use this vulnerability to bypass authentication security controls in ASG and ProxySG by...