CVE-2017-6328
HighSummary
The Symantec Messaging Gateway before version 10.6.3-267 is vulnerable to a cross site request forgery (CSRF) attack, which allows unauthorized commands to be transmitted from a user's trusted browser.
Risk Assessment
A CSRF attack can lead to unauthorized access to web application functions, potentially resulting in data leakage or other serious security consequences for the organization.
Recommendation
It is recommended to update the Symantec Messaging Gateway to version 10.6.3-267 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Symantec Messaging Gateway
See all- CVE-2017-6324High
The Symantec Messaging Gateway can process a corrupted Word file with potentially malicious macros despite the administrator having the 'disarm' functionality enabled. This constitutes a bypass of the application's disarm functionality.
- CVE-2017-6326Critical
The Symantec Messaging Gateway can encounter an issue of remote code execution, allowing commands to be executed remotely on a target machine or in a target process.
Original NVD description (English source)
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts. A CSRF attack attempts to exploit the trust that a specific website has in a user's browser.