Symantec ASG/ProxySG up to 6.5.10.14/6.6/6.7.4.1 FTP Proxy WebFTP Mode Stored cross site scripting

Summaryinfo

A vulnerability was found in Symantec ASG and ProxySG up to 6.5.10.14/6.6/6.7.4.1. It has been rated as problematic. This affects an unknown part of the component FTP Proxy WebFTP Mode. Performing a manipulation results in cross site scripting (Stored). This vulnerability is cataloged as CVE-2018-18370. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Symantec ASG and ProxySG up to 6.5.10.14/6.6/6.7.4.1 (Firewall Software). It has been classified as problematic. This affects an unknown function of the component FTP Proxy WebFTP Mode. The manipulation with an unknown input leads to a cross site scripting vulnerability (Stored). CWE is classifying the issue as CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This is going to have an impact on integrity. The summary by CVE is:

The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A stored cross-site scripting (XSS) vulnerability in the WebFTP mode allows a remote attacker to inject malicious JavaScript code in ASG/ProxySG's web listing of a remote FTP server. Exploiting the vulnerability requires the attacker to be able to upload crafted files to the remote FTP server. Affected versions: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2.

The weakness was shared 08/30/2019 (Website). It is possible to read the advisory at support.symantec.com. This vulnerability is uniquely identified as CVE-2018-18370 since 10/15/2018. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

Upgrading to version 6.5.10.15, 6.6 or 6.7.4.2 eliminates this vulnerability.

The entry VDB-141100 is related to this item. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• Symantec

Name

• ASG
• ProxySG

Version

• 6.0
• 6.1
• 6.2
• 6.3
• 6.4
• 6.5
• 6.5.10.0
• 6.5.10.1
• 6.5.10.2
• 6.5.10.3
• 6.5.10.4
• 6.5.10.5
• 6.5.10.6
• 6.5.10.7
• 6.5.10.8
• 6.5.10.9
• 6.5.10.10
• 6.5.10.11
• 6.5.10.12
• 6.5.10.13
• 6.5.10.14
• 6.6
• 6.7.4.0
• 6.7.4.1

License

• commercial

Website

• Vendor: https://www.symantec.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion