CVE-2017-6328 Cross-site request forgery in Messaging Gateway
Attackers can trick authenticated users into executing unauthorized commands on the Symantec Messaging Gateway web interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-6328?
CVE-2017-6328 is a high-severity vulnerability in Symantec Corporation Messaging Gateway, published on 11 Aug 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of cross site request forgery (also known as one-click attack and is abbreviated as CSRF or XSRF), which is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the web application trusts. A CSRF attack attempts to exploit the trust that a specific website has in a user's browser.
Weakness: CWE-352
Which versions are affected by CVE-2017-6328?
It affects 1 product.
Products include Symantec Message Gateway.
How do I fix CVE-2017-6328?
No fix has been published for CVE-2017-6328 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-6328 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2017-6328 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Symantec Corporation Messaging Gateway
Sources
Also known as GHSA-v26p-6c8q-68r2.