Vulnerability CVE-2015-6548
Published: 2015-09-20

Description:
Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

CVSS2 => (AV:N/AC:L/Au:M/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.8/10
6.4/10
6.4/10
Exploit range
Attack complexity
Authentication
Remote
Low
Multiple time
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Symantec -> Web gateway 

 References:
http://www.securityfocus.com/bid/76729
http://www.securitytracker.com/id/1033625
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150916_00
Copyright 2024, cxsecurity.com

 

Back to Top