CVE-2015-5692

admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated…

published September 20, 2015

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary code by uploading a file with a safe extension and content type, and then leveraging an improper Sudo configuration to make this a setuid-root file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05122 · 92.3th percentile
Published
2015-09-20T20:00Z
EPSS history
Timeline
  • 20 SEP 20:00Z
    admin_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated…
    cvelistv5