CVE-2015-5690
HighSummary
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging a 'redirect.'
Risk Assessment
This vulnerability may lead to unauthorized access to the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update the software to version 5.2.2 DB 5.0.0.1277 or later to mitigate this vulnerability.
Other vulnerabilities in Symantec Web Gateway (SWG) appliances
See all- CVE-2015-6547High
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors.
- CVE-2015-5693High
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands via vectors related to 'traffic capture.'
Original NVD description (English source)
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging a "redirect."