CVE-2019-18375
First published: Thu Apr 09 2020(Updated: )
The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the session of a currently logged-in user and access the management console.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom Symantec Advanced Secure Gateway | >=6.7.4<6.7.4.10 | |
| Broadcom Symantec Advanced Secure Gateway | >=7.1<7.2.0.1 | |
| Broadcom ProxySG | >=6.7.4<6.7.4.10 | |
| Broadcom ProxySG | >=7.1<7.2.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-18375?
CVE-2019-18375 is a session hijacking vulnerability in the ASG and ProxySG management consoles.
How does CVE-2019-18375 work?
A remote attacker, with access to the appliance management interface, can hijack the session of a currently logged-in user and access the management console.
Which software is affected by CVE-2019-18375?
Broadcom Advanced Secure Gateway (ASG) versions 6.7.4 to 6.7.4.10, 7.1 to 7.2.0.1, and Broadcom Symantec ProxySG versions 6.7.4 to 6.7.4.10, 7.1 to 7.2.0.1 are affected.
What is the severity of CVE-2019-18375?
CVE-2019-18375 has a severity score of 6.5, which is considered medium.
How can I fix CVE-2019-18375?
Users should upgrade to a fixed version of the affected software provided by Broadcom.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/broadcom
- canonical/broadcom symantec advanced secure gateway
- version/broadcom symantec advanced secure gateway/6.7.4
- version/broadcom symantec advanced secure gateway/7.1
- canonical/broadcom proxysg
- version/broadcom proxysg/6.7.4
- version/broadcom proxysg/7.1