Directory Traversal Vulnerability in Symantec Embedded Security Products
CVE-2015-8798

8HIGH

Key Information:

Vendor

Broadcom
Status
Symantec Data Center Security Server
Symantec Critical System Protection
Symantec Embedded Security Critical System Protection
Symantec Data Center Security Server And Agents
Vendor
CVE Published:
8 June 2016

What is CVE-2015-8798?

A directory traversal vulnerability exists in the Management Server of Symantec Embedded Security products, allowing remote authenticated users to execute arbitrary code. This vulnerability affects multiple versions of the software, potentially exposing sensitive data and systems to unauthorized access.

References

http://www.symantec.com/security_response/securityupdates...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/90884
vdb-entryx_refsource_BID

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2015-8798 : Directory Traversal Vulnerability in Symantec Embedded Security Products