CVE-2015-5690: OS Command Injection
Published Sep 20, 2015
·Updated
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to bypass intended access restrictions and execute arbitrary commands by leveraging a "redirect."
Affected Software
1 affected component
Symantec Web Gateway<=5.2.2
Event History
Sep 20, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5690?
CVE-2015-5690 is rated as a medium severity vulnerability.
2
How do I fix CVE-2015-5690?
To fix CVE-2015-5690, upgrade to Symantec Web Gateway version 5.2.2 or later.
3
What impact does CVE-2015-5690 have on systems?
CVE-2015-5690 allows remote authenticated users to bypass access restrictions and execute arbitrary commands.
4
Can CVE-2015-5690 be exploited remotely?
Yes, CVE-2015-5690 can be exploited by remote authenticated users.
5
What versions of Symantec Web Gateway are affected by CVE-2015-5690?
CVE-2015-5690 affects all versions of Symantec Web Gateway prior to 5.2.2.