CVE-2015-5693: Code Injection
Published Sep 20, 2015
·Updated
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands via vectors related to "traffic capture."
Affected Software
1 affected component
Symantec Web Gateway<=5.2.2
Event History
Sep 20, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-5693?
CVE-2015-5693 is classified as a high severity vulnerability that allows remote authenticated users to execute arbitrary commands.
2
How do I fix CVE-2015-5693?
To fix CVE-2015-5693, upgrade Symantec Web Gateway to version 5.2.2 or later.
3
What versions of Symantec Web Gateway are affected by CVE-2015-5693?
CVE-2015-5693 affects all versions of Symantec Web Gateway prior to 5.2.2.
4
Can CVE-2015-5693 be exploited remotely?
Yes, CVE-2015-5693 can be exploited by remote authenticated users.
5
What type of vulnerability is CVE-2015-5693?
CVE-2015-5693 is a command injection vulnerability related to the management console of Symantec Web Gateway.