817 matches found
CVE-2014-7285
CVE-2014-7285 affects Symantec Web Gateway (SWG) appliances running versions prior to 5.2.2. The vulnerability is an authenticated OS command injection in the management console, due to improper input validation in PHP scripts (notably potentially in restore-related functionality). An authenticat...
CVE-2014-7285
The management console on the Symantec Web Gateway SWG appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts...
CVE-2014-7285: Improper Neutralization of Special Elements used in a Command
The management console on the Symantec Web Gateway SWG appliance before 5.2.2 allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts...
PT-2014-7882
Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions prior to 5.2.2 Description The issue allows remote authenticated users to execute arbitrary OS commands by injecting command strings into unspecified PHP scripts in the management console of the Symantec Web Gatew...
Symantec Web Gateway OS Authenticated Command Injection
SUMMARY Symantec's Web Gateway SWG Appliance management console is susceptible to operating system command injection by an authenticated but less-privileged user. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec Web Gateway Appliance | 5.2.1 and prior | Symantec Web Gateway 5.2...
Symantec Web Gateway 5 restore.php Post Authentication Command Injection
This module exploits a command injection vulnerability found in Symantec Web Gateway's setting restoration feature. The filename portion can be used to inject system commands into a syscall function, and gain control under the context of HTTP service. For Symantec Web Gateway 5.1.1, you can explo...
McAfee Web Gateway GNU Bash Code Injection (SB10085) (Shellshock)
The remote host has a version of McAfee Web Gateway MWG installed that is affected by a command injection vulnerability in GNU Bash known as Shellshock. The vulnerability is due to the processing of trailing strings after function definitions in the values of environment variables. This allows a...
Symantec Web Gateway dbutils.php SQL Injection (CVE-2014-1651)
An SQL injection vulnerability exists in Symantec Web Gateway. The vulnerability is due to lack of proper sanitization of the "hostname" HTTP parameter passed to some PHP pages. A remote, authenticated attacker could exploit this vulnerability by sending a crafted HTTP request to the vulnerable...
McAfee Web Gateway Information Disclosure Vulnerability
McAfee Web Gateway is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
McAfee Web Gateway Information Disclosure (SB10080)
The remote host is running a version of McAfee Web Gateway MWG that is affected by an information disclosure vulnerability. There is an unspecified flaw in the admin interface that is triggered when viewing the top level 'Accounts' tab. This flaw allows a remote, authenticated attacker to gain...
Code injection
The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...
CVE-2014-6064
McAfee Web Gateway (MWG) information disclosure (CVE-2014-6064) affects the Admin UI Accounts tab. Versions before MWG 7.3.2.9 and before 7.4.2 on the 7.4.x line are vulnerable to remote authenticated access that can reveal hashed user passwords via unspecified vectors. The connected sources conf...
CVE-2014-6064
The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...
CVE-2014-6064: Exposure of Sensitive Information to an Unauthorized Actor
The Accounts tab in the administrative user interface in McAfee Web Gateway MWG before 7.3.2.9 and 7.4.x before 7.4.2 allows remote authenticated users to obtain the hashed user passwords via unspecified vectors...
PT-2014-7022
Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 7.3.2.9 McAfee Web Gateway versions 7.4.x prior to 7.4.2 Description The issue allows remote authenticated users to obtain hashed user passwords via unspecified vectors in the Accounts tab of the...
McAfee Web Gateway Admin Traffic Detection
Binary data 8346.prm...
McAfee Web Gateway Proxy Detection
Binary data 8345.prm...
McAfee Web Gateway Proxy Detection (Blocked Resource)
Binary data 8344.prm...
Symantec Web Gateway Multiple PHP Pages Cross Site Scripting (CVE-2014-1652)
A cross-site scripting vulnerability exists in Symantec Web Gateway. Successful exploitation could result in attacker-controlled script code being executed in the browser context of the Symantec Web Gateway management console. The vulnerability is due to improper validation of "variable",...
