CVE-2013-4672

EPSS 0.18%
Veröffentlicht 01.08.2013 13:32:21
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@symantec.com
Teams Watchlist Login
Unerledigt Login

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Web Gateway Version <= 5.1

Symantec ≫ Web Gateway Version5.0

Symantec ≫ Web Gateway Version5.0.1

Symantec ≫ Web Gateway Version5.0.2

Symantec ≫ Web Gateway Version5.0.3

Symantec ≫ Web Gateway Version5.0.3.18

Symantec ≫ Web Gateway Appliance 8450 Version-

Symantec ≫ Web Gateway Appliance 8490 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.359

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	4.1	10	AV:A/AC:L/Au:M/C:C/I:C/A:C

http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00

Vendor Advisory

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt

http://osvdb.org/95695

http://www.securityfocus.com/bid/61104

https://nvd.nist.gov/vuln/detail/CVE-2013-4672

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4672

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4672

EUVD