NVD

Id
40224  
Name
CVE-2013-4671  
Description
Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-08-01  
Modified Date
2014-01-17  
Seq
2013-4671  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204625 40224 CVE-2013-4671 http://packetstormsecurity.com/files/122556/Symantec-Web-Gateway-XSS-CSRF-SQL-Injection-Command-Injection.html  View
204626 40224 CVE-2013-4671 61102  View
204627 40224 CVE-2013-4671 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130725_00  View
204628 40224 CVE-2013-4671 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130726-0_Symantec_Web_Gateway_Multiple_Vulnerabilities_v10.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22046 JVNDB-2013-003621 Symantec Web Gateway アプライアンスの管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 Symantec Web Gateway (SWG) アプライアンスの管理コンソールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-4671 64613 CVE-2013-4671 40224 6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003621.html 2013-07-25 2013-08-02 View