Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec企业防火墙(SEF) HTTP URL模式匹配可被绕过漏洞
Vulnerability Description
Symantec企业防火墙产品使用应用代理策略提供安全加强，如HTTP代理可以允许防火墙阻挡基于预定义规则的URL。 Symantec企业防火墙的URL规则过滤对部分编码缺少正确处理，远程攻击者可以利用这个漏洞绕过安全策略，访问受限资源。 HTTP模式匹配功能通过分析HTTP URL格式和对比预定义特征数据库来完成，当配置成功，就会把这个请求阻挡，返回'403 Forbidden error'信息。但是，如果请求的URL使用特殊的编码(如转义代码、Unicode、UTF-8等)，模式匹配的解析会失败，攻击
CVSS Information
N/A
Vulnerability Type
N/A