CVE-2013-4671

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources

Severity

6.0MEDIUM

EPSS

1.3%

top 20.35%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Symantec WEB Gateway

Timeline

PublishedAug 1

Latest updateMay 17

Description

Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 6.8 | Impact: 6.4

Affected Packages1 packages

▶NVDsymantec/web_gateway5.1+5

🔴Vulnerability Details

GHSA

GHSA-hgf7-p26c-34xx: Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5↗2022-05-17

▶

CVEList

CVE-2013-4671: Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5↗2013-07-31

▶