PT-2018-16832 · Symantec · Symantec Advanced Secure Gateway+1

Publicado 2018-05-29 · Atualizado 2021-07-08 · CVE-2018-5241

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Advanced Secure Gateway (ASG) versions 6.6 through 6.7 ProxySG versions 6.5 through 6.7

Description The products can be configured with a SAML authentication realm to authenticate network users in intercepted proxy traffic. When parsing SAML responses, the products incorrectly handle XML nodes with comments. A remote attacker can modify a valid SAML response without invalidating its cryptographic signature, potentially allowing the attacker to bypass user authentication security controls. This issue only affects authentication of network users in intercepted traffic and does not affect administrator user authentication for the management consoles.

Recommendations For Symantec Advanced Secure Gateway (ASG) versions 6.6 through 6.7, consider disabling SAML authentication until a patch is available. For ProxySG versions 6.5 through 6.7, consider disabling SAML authentication until a patch is available. As a temporary workaround, restrict access to the SAML authentication realm to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2018-5241

Produtos afetados

Proxysg

Symantec Advanced Secure Gateway

Referências · 6

• https://t.me/cvenotify/17268 · Publicação no Telegram
• https://symantec.com/security-center/network-protection-security-advisories/SA167 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5241 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-5241 · Aviso do Fabricante
• http://securitytracker.com/id/1040993 · Nota
• http://securityfocus.com/bid/104282 · Nota