CVE-2016-2206 The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6...
MediumCVSS 5.7
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download configuration file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec workspace streaming | = 7.5.0 | No fix listed |
| symantec workspace streaming | = 7.5.0-sp1 | No fix listed |
| symantec workspace streaming | = 7.6.0 | No fix listed |
| symantec workspace virtualization | = 7.5.0 | No fix listed |
| symantec workspace virtualization | = 7.5.0-sp1 | No fix listed |
| symantec workspace virtualization | = 7.6.0 | No fix listed |
References
- 89394 vdb-entry
- 1036262 vdb-entry
- 1036263 vdb-entry
- www.symantec.com vendor-advisory