RCE in Symantec Web Gateway
CVE-2012-2976
The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.054 (91.8th percentile) — read the EPSS interpretation.
Affected products
- Symantec Web_gateway — versions 5.0, 5.0.1, 5.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (x_refsource_CONFIRM)
- cret@cert.org (x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_BID)