CVE-2013-4672: High severity symantec web gateway appliance vulnerability
Published Jul 31, 2013
·Updated
The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command.
Affected Software
8 affected components
Symantec Web Gateway<=5.1
Symantec Web Gateway=5.0
Symantec Web Gateway=5.0.1
Symantec Web Gateway=5.0.2
Symantec Web Gateway=5.0.3
Symantec Web Gateway=5.0.3.18
Symantec Web Gateway Appliance 8450
Symantec Web Gateway Appliance 8490
Event History
Jul 31, 2013
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4672?
CVE-2013-4672 is classified as a moderate severity vulnerability due to the potential for local users to gain unauthorized access.
2
How do I fix CVE-2013-4672?
To fix CVE-2013-4672, update the Symantec Web Gateway to version 5.1.1 or later.
3
What versions of Symantec Web Gateway are affected by CVE-2013-4672?
CVE-2013-4672 affects Symantec Web Gateway versions prior to 5.1.1, including 5.0 and its subversions.
4
Can CVE-2013-4672 lead to data breaches?
Yes, CVE-2013-4672 could potentially lead to data breaches by allowing local users to bypass access restrictions.
5
Who is impacted by CVE-2013-4672?
Organizations using affected versions of Symantec Web Gateway are at risk due to the vulnerability in the management console.