Symantec ASG/ProxySG up to 6.5.10.14/6.6/6.7.4.1 FTP Proxy WebFTP Mode information disclosure

Summaryinfo

A vulnerability categorized as problematic has been discovered in Symantec ASG and ProxySG up to 6.5.10.14/6.6/6.7.4.1. This vulnerability affects unknown code of the component FTP Proxy WebFTP Mode. Executing a manipulation can lead to information disclosure. This vulnerability is registered as CVE-2018-18371. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Symantec ASG and ProxySG up to 6.5.10.14/6.6/6.7.4.1 (Firewall Software). It has been declared as problematic. This vulnerability affects an unknown functionality of the component FTP Proxy WebFTP Mode. The manipulation with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. CVE summarizes:

The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information disclosure vulnerability in the WebFTP mode allows a malicious user to obtain plaintext authentication credentials for a remote FTP server from the ASG/ProxySG's web listing of the FTP server. Affected versions: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2.

The weakness was published 08/30/2019 (Website). The advisory is shared for download at support.symantec.com. This vulnerability was named CVE-2018-18371 since 10/15/2018. The attack can be initiated remotely. The successful exploitation needs a single authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

Upgrading to version 6.5.10.15, 6.6 or 6.7.4.2 eliminates this vulnerability.

Similar entry is available at VDB-141099. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• Symantec

Name

• ASG
• ProxySG

Version

• 6.0
• 6.1
• 6.2
• 6.3
• 6.4
• 6.5
• 6.5.10.0
• 6.5.10.1
• 6.5.10.2
• 6.5.10.3
• 6.5.10.4
• 6.5.10.5
• 6.5.10.6
• 6.5.10.7
• 6.5.10.8
• 6.5.10.9
• 6.5.10.10
• 6.5.10.11
• 6.5.10.12
• 6.5.10.13
• 6.5.10.14
• 6.6
• 6.7.4.0
• 6.7.4.1

License

• commercial

Website

• Vendor: https://www.symantec.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion