medium6.5
CVE-2019-18375
The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability.
Impact
The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the session of a currently logged-in user and access the management console.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Advanced Secure Gateway | from 6.7.4 before 6.7.4.10 from 7.1 before 7.2.0.1 |
| Broadcom | Symantec Proxysg | from 6.7.4 before 6.7.4.10 from 7.1 before 7.2.0.1 |