Trustwave Secure Web Gateway (SWG) up to and including 11.8.0.27 allows remote malicious users to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
trustwave secure web gateway |