PT-2020-9958
CVE-2019-18375
·
Published
2020-04-09
·
Updated
2021-07-08
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
ASG and ProxySG (affected versions not specified)
Description:
The issue concerns a session hijacking vulnerability in the management consoles of ASG and ProxySG. A remote attacker with access to the appliance management interface can exploit this to hijack the session of a currently logged-in user, thereby gaining access to the management console.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾