CVE-2021-46825 Other in Advance Secure Gateway and ProxySG
Remote attackers can exploit HTTP desync in Symantec ASG and ProxySG to intercept or modify web traffic between clients and servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-46825?
CVE-2021-46825 is a critical vulnerability in Advance Secure Gateway and ProxySG, published on 7 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web server responses to unintended clients. Severity/CVSSv3: High / 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness: CWE-444
Which versions are affected by CVE-2021-46825?
It affects 2 products.
Products include Broadcom Advanced Secure Gateway, Broadcom Proxysg.
How do I fix CVE-2021-46825?
No fix has been published for CVE-2021-46825 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-46825 being exploited?
There is no known exploitation of CVE-2021-46825 in the wild and no public exploit code.
Other vulnerabilities in Advance Secure Gateway and ProxySG
- CVE-2023-23952 Command injection in Advanced Secure Gateway, Content Analysis
- CVE-2018-5241 Auth bypass in Advanced Secure Gateway (ASG)
- CVE-2023-23955 Server-side request forgery in Advanced Secure Gateway, Content Analysis
- CVE-2023-23953 Privilege escalation in Advanced Secure Gateway, Content Analysis
- CVE-2016-9100 Information disclosure in ASG
Sources
Also known as GHSA-2h97-8375-29wg.