CVE-2009-0064
Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.21%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving (1) administrative scripts or (2) console functions.
- CVSS 2.0
- 9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
- EPSS
- 2.21% probability · 82th percentile
- CISA KEV
- Not listed
- Affected
- symantec/brightmail gateway appliance
- Source
- cve@mitre.org
References
- http://osvdb.org/53945
- http://secunia.com/advisories/34885
- http://securitytracker.com/id?1022117Patch
- http://www.securityfocus.com/bid/34639
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01
- http://www.vupen.com/english/advisories/2009/1155Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50075
- http://osvdb.org/53945
- http://secunia.com/advisories/34885
- http://securitytracker.com/id?1022117Patch
- http://www.securityfocus.com/bid/34639
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090423_01
- http://www.vupen.com/english/advisories/2009/1155Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50075
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.