Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-0308 — Cross-Site Request Forgery in Messaging Gateway

CWE-352 — Cross-Site Request Forgery4 documents4 sources

Severity

6.8MEDIUMNVD

EPSS

0.2%

top 54.81%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Symantec Messaging Gateway

Timeline

PublishedAug 29

Latest updateMay 4

Description

Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to hijack the authentication of administrators.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDsymantec/messaging_gateway9.5.4+5

🔴Vulnerability Details

GHSA

GHSA-8v6v-8fvr-82fp: Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10↗2022-05-04

▶

CVEList

CVE-2012-0308: Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10↗2012-08-29

▶

💥Exploits & PoCs

Exploit-DB

Symantec Messaging Gateway 9.5.3-3 - Cross-Site Request Forgery↗2012-12-03

▶