CVE-2017-15527
Medium
Description
Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that can occur when there is insufficient security validation / sanitization of user-supplied input file names, such that characters representing "traverse to parent directory" are passed through to the file APIs.
SeverityMedium
CVSS6.8
Exploit probability—
ProductSymantec Management Console
PublishedNov 20, 2017
First seenNov 20, 2017
How to fix
Update
- symantec management_console8.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec management_console | v < 8.1 | 8.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.