PT-2019-15385 · Symantec · Symantec Messaging Gateway

Publicado 2019-12-11 · Atualizado 2019-12-13 · CVE-2019-18379

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.7.3

Description The issue is related to a server-side request forgery (SSRF) exploit. This type of issue can allow an attacker to send crafted requests from the backend server of a vulnerable web application or access services available through the loopback interface.

Recommendations For versions prior to 10.7.3, update to version 10.7.3 or later to resolve the issue.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2019-18379

Produtos afetados

Symantec Messaging Gateway

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-18379 · Aviso do Fabricante
• https://support.symantec.com/us/en/article.SYMSA1501.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-18379 · Nota de Segurança