CVE-2013-1617: SQL Injection
Published Jul 31, 2013
·Updated
Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.
Affected Software
8 affected components
Symantec Web Gateway<=5.1
Symantec Web Gateway=5.0
Symantec Web Gateway=5.0.1
Symantec Web Gateway=5.0.2
Symantec Web Gateway=5.0.3
Symantec Web Gateway=5.0.3.18
Symantec Web Gateway Appliance 8450
Symantec Web Gateway Appliance 8490
Event History
Jul 31, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1617?
CVE-2013-1617 is classified as a medium severity vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2013-1617?
To fix CVE-2013-1617, you should upgrade the Symantec Web Gateway to version 5.1.1 or later.
3
Who is affected by CVE-2013-1617?
CVE-2013-1617 affects remote authenticated administrators using versions of Symantec Web Gateway before 5.1.1.
4
What types of attacks can exploit CVE-2013-1617?
CVE-2013-1617 can be exploited to execute arbitrary SQL commands, potentially compromising database integrity.
5
When was CVE-2013-1617 disclosed?
CVE-2013-1617 was disclosed in July 2013.