First published: Wed Aug 29 2012(Updated: )
Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to hijack the authentication of administrators.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Broadcom Symantec Messaging Gateway | <=9.5.4 | |
Broadcom Symantec Messaging Gateway | =9.5 | |
Broadcom Symantec Messaging Gateway | =9.5.1 | |
Broadcom Symantec Messaging Gateway | =9.5.2 | |
Broadcom Symantec Messaging Gateway | =9.5.3 | |
Broadcom Symantec Messaging Gateway | =10.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-0308 is classified as a medium severity vulnerability due to its potential to allow unauthorized access to administrative functions.
To fix CVE-2012-0308, upgrade Symantec Messaging Gateway to version 10.0 or later.
CVE-2012-0308 is a cross-site request forgery (CSRF) vulnerability.
Administrators using versions of Symantec Messaging Gateway prior to 10.0 are affected by CVE-2012-0308.
Attackers exploiting CVE-2012-0308 can hijack the authentication of administrators, potentially leading to unauthorized access.