CVE-2004-0192 | BDVDB-2026-6147 Detail

Description#

Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/9755
https://exchange.xforce.ibmcloud.com/vulnerabilities/15330
http://marc.info/?l=bugtraq&m=107790684732458&w=2

Exploit#

No public exploit known

History#

Version 12004-03-04Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.