NVD

Id
42428  
Name
CVE-2012-0297  
Description
The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by (1) injecting crafted data or (2) including crafted data.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-05-21  
Modified Date
2012-05-22  
Seq
2012-0297  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213928 42428 CVE-2012-0297 53444  View
213929 42428 CVE-2012-0297 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120517_00  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26765 JVNDB-2012-002472 Symantec Web Gateway の管理画面における任意のコードを実行される脆弱性 Symantec Web Gateway の管理画面は、アプリケーションスクリプトへのアクセスを適切に制限しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-0297 53535 CVE-2012-0297 42428 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002472.html 2012-05-17 2012-05-23 View