CVE-2004-0192

published 2004-03-15

CVE-2004-0192: Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a…

medium 6.8 CVSS 3.1

AV N AC M Au N C P I P A P

EXPLOIT

Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
symantec	gateway_security_5400	—	—