CVE-2014-1649 The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS.
HighCVSS 7.9
EPSS 42.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec workspace streaming | <= 7.5.0 | No fix listed |
| symantec workspace streaming | = 6.1 | No fix listed |
| symantec workspace streaming | = 6.1-sp1 | No fix listed |
| symantec workspace streaming | = 6.1-sp2 | No fix listed |
| symantec workspace streaming | = 6.1-sp3 | No fix listed |
| symantec workspace streaming | = 6.1-sp4 | No fix listed |
References
- 33521 exploit
- 67189 vdb-entry
- www.symantec.com vendor-advisory
- zerodayinitiative.com