description: Unrestricted file upload vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can upload arbitrary malicious files to the management console and trick another administrator user into downloading and executing malicious code.
problem types: Unrestricted file upload
affected:
{
product: Advanced Secure Gateway (ASG)
vendor: Symantec Corporation
versions:
status: affected, version: 6.6 prior to 6.6.5.14
status: affected, version: 6.7 prior to 6.7.3.1
}
{
product: ProxySG
vendor: Symantec Corporation
versions:
status: affected, version: 6.5 prior to 6.5.10.8
status: affected, version: 6.6 prior to 6.6.5.14
status: affected, version: 6.7 prior to 6.7.3.1
}
