high8.8
CVE-2016-5313
Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands.
Impact
Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Web Gateway | through 5.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/139006/Symantec-Web-Gateway-5.2.2-OS-Command-Injection.html
- http://seclists.org/fulldisclosure/2016/Oct/24
- http://www.securityfocus.com/bid/93284
- http://www.securitytracker.com/id/1036973
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161005_00
- http://packetstormsecurity.com/files/139006/Symantec-Web-Gateway-5.2.2-OS-Command-Injection.html
- http://seclists.org/fulldisclosure/2016/Oct/24
- http://www.securityfocus.com/bid/93284
- http://www.securitytracker.com/id/1036973
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161005_00