Description
The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 prior to 6.7.1.2 management consoles do not, under certain circumstances, correctly authorize administrator users. A malicious administrator with read-only access can exploit this vulnerability to access management console functionality that requires read-write access privileges.
Metrics
CVSS 3.0 7.2/10
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Symantec Corporation | Symantec Advanced Secure Gateway (ASG) and ProxySG | ASG 6.6 prior to 6.6.5.8, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, ProxySG 6.7 prior to 6.7.1.2 |
References
- http://www.securityfocus.com/bid/101530Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039701Third Party Advisory, VDB Entry
- https://www.symantec.com/security-center/network-protection-security-advisories/SA146Vendor Advisory
- http://www.securityfocus.com/bid/101530Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039701Third Party Advisory, VDB Entry
- https://www.symantec.com/security-center/network-protection-security-advisories/SA146Vendor Advisory
Timeline
- Published
- May 11, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified