Symantec Web Gateway is prone to a security-bypass vulnerability. Successful exploits may allow attackers to change another user's password allowing them to gain unauthorized access in the context of the affected user. This may aid in further attacks. Symantec Web Gateway versions 5.0.x.x are vulnerable.

Vendor updates are available. Please see the references for more information.

• http://www.securityfocus.com/bid/54430
• http://www.symantec.com/business/web-gateway

---

Updated on 2015-03-25