CVE-2012-2957

CVE-2012-2957 describes a local privilege escalation vulnerability affecting Symantec Web Gateway 5.0.x before version 5.0.3.18. This flaw, related to a "file inclusion" issue, allows local users to gain elevated privileges by modifying files within the management console. With a CVSS score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C), the vulnerability is severe, indicating complete compromise of confidentiality, integrity, and availability once exploited locally with low attack complexity. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, demonstrating local/remote file inclusion and remote command execution, though there is no evidence of active exploitation or significant community discussion.