PT-2012-2479 · Symantec · Symantec Message Filter+1

Publicado 2012-07-05 · Atualizado 2012-07-06 · CVE-2012-0303

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Message Filter version 6.3

Description The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities in the Brightmail Control Center component. These vulnerabilities allow remote attackers to hijack the authentication of arbitrary users, enabling them to execute application commands or create admin accounts.

Recommendations For Symantec Message Filter version 6.3, consider disabling access to the Brightmail Control Center until a patch is available to prevent potential exploitation of the CSRF vulnerabilities. Restrict access to admin account creation and application command execution to minimize the risk of unauthorized actions.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2012-0303

Produtos afetados

Brightmail Control Center

Symantec Message Filter

Referências · 3

• http://securityfocus.com/bid/54133 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0303 · Nota de Segurança
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120626_00 · Aviso do Fabricante