Vulnerability Description
The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the session of a currently logged-in user and access the management console.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Broadcom | Advanced Secure Gateway | >= 6.7.4, < 6.7.4.10 |
| Broadcom | Symantec Proxysg | >= 6.7.4, < 6.7.4.10 |
References
- https://support.broadcom.com/security-advisory/security-advisory-detail.html?notVendor Advisory
- https://support.broadcom.com/security-advisory/security-advisory-detail.html?notVendor Advisory
FAQ
What is CVE-2019-18375?
CVE-2019-18375 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A remote attacker, with access to the appliance management interface, can hijack the session of a currentl...
How severe is CVE-2019-18375?
CVE-2019-18375 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-18375?
Check the references section above for vendor advisories and patch information. Affected products include: Broadcom Advanced Secure Gateway, Broadcom Symantec Proxysg.