Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-18371

The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information disclosure vulnerabi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
symantec

Description

The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information disclosure vulnerability in the WebFTP mode allows a malicious user to obtain plaintext authentication credentials for a remote FTP server from the ASG/ProxySG's web listing of the FTP server. Affected versions: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Symantec Corporation Symantec Advanced Secure Gateway (ASG)

  • 6.6 and 6.7 prior to 6.7.4.2affected

Symantec Corporation Symantec ProxySG

  • 6.5 prior to 6.5.10.15affected
  • 6.6affected
  • 6.7 prior to 6.7.4.2affected

References