CVE-2013-5012: SQL Injection
Published Feb 11, 2014
·Updated
Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Affected Software
1 affected component
Symantec Web Gateway<=5.1.1
Event History
Feb 11, 2014
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-5012?
CVE-2013-5012 is considered a critical severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2013-5012?
To mitigate CVE-2013-5012, upgrade the Symantec Web Gateway to version 5.2 or later.
3
What types of systems are affected by CVE-2013-5012?
CVE-2013-5012 affects Symantec Web Gateway versions prior to 5.2, specifically versions up to 5.1.1.
4
Can CVE-2013-5012 be exploited by unauthenticated users?
No, CVE-2013-5012 can only be exploited by remote authenticated users.
5
What are the potential consequences of CVE-2013-5012?
Exploitation of CVE-2013-5012 could lead to unauthorized execution of arbitrary SQL commands in the affected systems.