ID de Prueba:	1.3.6.1.4.1.25623.1.0.105142
Categoría:	Web application abuses
Título:	Symantec Web Gateway < 5.2.2 Command Injection Vulnerability
Resumen:	Symantec Web Gateway is prone to a command injection; vulnerability.
Descripción:	Summary: Symantec Web Gateway is prone to a command injection vulnerability. Vulnerability Insight: Symantec was notified of an OS command injection vulnerability in PHP script which impacts the SWG management console. The results of successful exploitation could potentially range from unauthorized disclosure of sensitive data to possible unauthorized access to the Symantec Web Gateway Appliance. Vulnerability Impact: Successfully exploiting this issue may allow an attacker to execute arbitrary OS commands in the context of the affected appliance. Affected Software/OS: Symantec Web Gateway versions prior to 5.2.2. Solution: Update to version 5.2.2 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-7285 BugTraq ID: 71620 http://www.securityfocus.com/bid/71620 http://www.exploit-db.com/exploits/36263 http://karmainsecurity.com/KIS-2014-19 http://packetstormsecurity.com/files/130612/Symantec-Web-Gateway-5-restore.php-Command-Injection.html http://osvdb.org/show/osvdb/116009 http://www.securitytracker.com/id/1031386
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.