CVE-2015-5692

published 2015-09-20

CVE-2015-5692: admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated…

high 7.9 CVSS 3.1

AV N AC M Au M C C I C A C

admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type, and then leveraging an improper Sudo configuration to make this a setuid-root file.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
symantec	web_gateway	<= 5.2.2	—

CWE-264