Description
Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Symantec Corporation Advanced Secure Gateway (ASG)
6.6 prior to 6.6.5.14affected6.7 prior to 6.7.3.1affected
Symantec Corporation ProxySG
6.5 prior to 6.5.10.8affected6.6 prior to 6.6.5.14affected6.7 prior to 6.7.3.1affected