VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 30, 2019· Updated Jun 17, 2026

CVE-2018-18371

CVE-2018-18371

Description

The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information disclosure vulnerability in the WebFTP mode allows a malicious user to obtain plaintext authentication credentials for a remote FTP server from the ASG/ProxySG's web listing of the FTP server. Affected versions: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2.

Affected products

7
  • Broadcom Corporation/Advanced Secure Gateway2 versions
    cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:broadcom:advanced_secure_gateway:*:*:*:*:*:*:*:*range: >=6.7,<6.7.4.2
    • cpe:2.3:a:broadcom:advanced_secure_gateway:6.6:*:*:*:*:*:*:*
  • Broadcom Corporation/Symantec Proxysg2 versions
    cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:broadcom:symantec_proxysg:*:*:*:*:*:*:*:*range: >=6.5,<6.5.10.15
    • cpe:2.3:a:broadcom:symantec_proxysg:6.6:*:*:*:*:*:*:*
  • Symantec/ASG/ProxySGllm-create
    Range: ASG 6.6 and 6.7 prior to 6.7.4.2; ProxySG 6.5 prior to 6.5.10.15, 6.6, and 6.7 prior to 6.7.4.2
  • Symantec Corporation/Symantec Advanced Secure Gateway (ASG)v5
    Range: 6.6 and 6.7 prior to 6.7.4.2
  • Symantec Corporation/Symantec ProxySGv5
    Range: 6.5 prior to 6.5.10.15

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.