APP: Symantec Web Gateway Cross Site Request Forgery

This signature detects attempts to exploit a known vulnerability against Symantec Web Gateway. A successful attack can lead to cross-site request forgery attacks and unauthorized session hijack.

Extended Description

Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

References

BugTraq: 61102

CVE: CVE-2013-4671

Short Name
APP:SYMC:WEB-GATEWAY-CSRF
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
CVE-2013-4671 Cross Forgery Gateway Request Site Symantec Web bid:61102
Release Date
08/05/2013
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3761
False Positive
Unknown
CVSS Score

6.0

Found a potential security threat?