PT-2016-5067

CVE-2016-2206

·

Publicado

2016-07-12

·

Atualizado

2017-09-01

Descrição por

CVSS 3.1
5.7
Média
MétricasAV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Symantec Workspace Streaming (SWS) versions 7.5.x through 7.5 SP1 HF8 Symantec Workspace Streaming (SWS) version 7.6.0 Symantec Workspace Virtualization (SWV) versions 7.5.x through 7.5 SP1 HF8 Symantec Workspace Virtualization (SWV) version 7.6.0
Description The management console in the affected software allows remote authenticated users to read arbitrary files by modifying the file-download configuration file.
Recommendations For Symantec Workspace Streaming (SWS) versions 7.5.x through 7.5 SP1 HF8, update to 7.5 SP1 HF9 or later. For Symantec Workspace Streaming (SWS) version 7.6.0, update to 7.6 HF5 or later. For Symantec Workspace Virtualization (SWV) versions 7.5.x through 7.5 SP1 HF8, update to 7.5 SP1 HF9 or later. For Symantec Workspace Virtualization (SWV) version 7.6.0, update to 7.6 HF5 or later.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2016-2206
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com