CVE-2012-0297

Published: May 21, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

53444

vdb-entry

x_refsource_BID

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00

x_refsource_CONFIRM

symantec-web-file-include(75731)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2012-0297

Description

Affected Products

References