CVE-2013-4672

EPSS 0.18%
Published 01.08.2013 13:32:21
Last modified 11.04.2025 00:51:21
Source secure@symantec.com
Teams watchlist Login
Open Login

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Symantec ≫ Web Gateway Version <= 5.1

Symantec ≫ Web Gateway Version5.0

Symantec ≫ Web Gateway Version5.0.1

Symantec ≫ Web Gateway Version5.0.2

Symantec ≫ Web Gateway Version5.0.3

Symantec ≫ Web Gateway Version5.0.3.18

Symantec ≫ Web Gateway Appliance 8450 Version-

Symantec ≫ Web Gateway Appliance 8490 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.18%	0.359

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.2	4.1	10	AV:A/AC:L/Au:M/C:C/I:C/A:C

http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00

Vendor Advisory

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt

http://osvdb.org/95695

http://www.securityfocus.com/bid/61104

https://nvd.nist.gov/vuln/detail/CVE-2013-4672

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4672

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4672

EUVD