CVE Vulnerabilities

CVE-2013-4672

Published: Aug 01, 2013 | Modified: Jan 17, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:A/AC:L/Au:M/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command.

Affected Software

Name Vendor Start Version End Version
Web_gateway Symantec * 5.1
Web_gateway Symantec 5.0 5.0
Web_gateway Symantec 5.0.1 5.0.1
Web_gateway Symantec 5.0.2 5.0.2
Web_gateway Symantec 5.0.3 5.0.3
Web_gateway Symantec 5.0.3.18 5.0.3.18

References