PT-2012-2474 · Symantec · Symantec Web Gateway

Published 2012-05-21 · Updated 2017-12-05 · CVE-2012-0298

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Symantec Web Gateway versions 5.0.x through 5.0.2

Description The issue concerns the file-management scripts in the management GUI, allowing remote attackers to read or delete arbitrary files.

Recommendations For Symantec Web Gateway versions 5.0.x through 5.0.2, update to version 5.0.3 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-0298

Affected Products

Symantec Web Gateway

References · 5

• 🔥 https://exploit-db.com/exploits/19406 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-0298 · Security Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00 · Vendor Advisory
• http://securityfocus.com/bid/53442 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75732 · Note