CVE-2018-18371: Medium severity broadcom symantec advanced secure gateway vulnerability
The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information disclosure vulnerability in the WebFTP mode allows a malicious user to obtain plaintext authentication credentials for a remote FTP server from the ASG/ProxySG's web listing of the FTP server. Affected versions: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-18371?
CVE-2018-18371 is an information disclosure vulnerability in the ASG/ProxySG FTP proxy WebFTP mode.
How does CVE-2018-18371 work?
CVE-2018-18371 allows a malicious user to obtain plaintext authentication credentials for a remote FTP server accessed via a ftp:// URL in a web browser.
What is the affected software?
The affected software includes Broadcom Advanced Secure Gateway versions 6.7 to 6.7.4.2, Broadcom Advanced Secure Gateway version 6.6, Broadcom Symantec Proxysg versions 6.5 to 6.5.10.15, and Broadcom Symantec Proxysg version 6.6.
What is the severity of CVE-2018-18371?
CVE-2018-18371 has a severity rating of medium.
How do I fix CVE-2018-18371?
To fix CVE-2018-18371, users should update to the latest version of the affected software.