Symantec Web Gateway is prone to a local authentication-bypass vulnerability A attacker can exploit this issue by manipulating certain local files to bypass authentication and gain unauthorized privileged access to the application. Successful exploits may lead to other attacks. Symantec Web Gateway versions 5.0.x.x are vulnerable.

Vendor updates are available. Please see the references for more information.

• http://www.securityfocus.com/bid/54429
• http://www.symantec.com/business/web-gateway

---

Updated on 2015-03-25