PT-2018-4648 · Symantec · Symantec Proxysg

Publicado 2018-01-10 · Atualizado 2021-07-08 · CVE-2016-10256

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Symantec ProxySG versions prior to 6.5.10.6 Symantec ProxySG version 6.6 Symantec ProxySG versions prior to 6.7.2.1

Description The management console of Symantec ProxySG is susceptible to a reflected XSS issue. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client application.

Recommendations For Symantec ProxySG versions prior to 6.5.10.6, update to version 6.5.10.6 or later. For Symantec ProxySG version 6.6, update to a version that is not affected, such as 6.7.2.1 or later. For Symantec ProxySG versions prior to 6.7.2.1, update to version 6.7.2.1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-10256

Produtos afetados

Symantec Proxysg

Referências · 6

• http://securityfocus.com/bid/102451 · Nota
• http://securitytracker.com/id/1040138 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-10256 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-10256 · Aviso do Fabricante
• https://t.me/cvenotify/17263 · Publicação no Telegram
• https://symantec.com/security-center/network-protection-security-advisories/SA155 · Aviso do Fabricante