SQL injection vulnerability in the management server in Symantec Critical System Protection (SCSP) 5.2.9 before MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x prior to 6.0 MP1 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
broadcom symantec critical system protection 5.2.9 |
||
symantec data center security 6.0.0 |
Stop face-palming and start patching - the fixes are out there
Security bod Stefan Viehböck has detailed holes in Symantec's data centre security platforms that the company plugged this week because they allowed hackers to gain privilege access to management servers. The patches fix holes in the management server for Symantec Critical System Protection (SCSP) 5.2.9 and its predecessor Data Center Security: Server Advanced (SDCS:SA) 6.0.x and 6.0 MP1. SEC Consult researcher Stefan Viehböck who found the flaws said the products should not be used until a fu...
Vulmon