CVE-2012-2977

CVE-2012-2977 describes a vulnerability in Symantec Web Gateway 5.0.x before version 5.0.3.18, where a flaw in the management console allows remote attackers to change arbitrary user passwords through crafted input to an application script. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity and no authentication required, leading to a potential impact of unauthorized password modification. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, including a Metasploit module, though there is no evidence of active exploitation or significant community discussion.