Remote Information Disclosure in Symantec Security Information Manager Appliances
CVE-2013-1615

Currently unrated

Key Information:

Vendor
Symantec
Status
Security Information Manager
Security Information Manager Appliance
Vendor
CVE Published:
8 July 2013

Summary

The management console of Symantec Security Information Manager (SSIM) appliances versions 4.7.x and 4.8.x prior to 4.8.1 is susceptible to a vulnerability that enables remote attackers to access sensitive information. This can be exploited through unspecified calls to the web-GUI API, potentially compromising data security and privacy.

References

http://www.symantec.com/security_response/securityupdates...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/60798
vdb-entryx_refsource_BID

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.