CVE-2015-5692 in Web Gateway정보

요약

\~에 의해 MITRE

admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type, and then leveraging an improper Sudo configuration to make this a setuid-root file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

출처

Do you need the next level of professionalism?

Upgrade your account now!