NVD

Id
26778  
Name
CVE-2015-5690  
Description
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging a "redirect."  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-20  
Modified Date
2016-12-21  
Seq
2015-5690  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
141684 26778 CVE-2015-5690 76725  View
141685 26778 CVE-2015-5690 1033625  View
141686 26778 CVE-2015-5690 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00  View
141687 26778 CVE-2015-5690 http://www.zerodayinitiative.com/advisories/ZDI-15-444/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9577 JVNDB-2015-004897 Symantec Web Gateway アプライアンスのソフトウェア上で稼動する管理コンソールにおけるアクセス制限を回避される脆弱性 Symantec Web Gateway (SWG) アプライアンスのソフトウェア上で稼動する管理コンソールには、アクセス制限を回避される、および任意のコマンドを実行される脆弱性が存在します。 CVE-2015-5690 82915 CVE-2015-5690 26778 8.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004897.html 2015-09-16 2015-09-29 View