CVE-2017-15527

2017-11-2000:00:00

symantec

www.cve.org

0.0004 Low

EPSS

Percentile

12.7%

JSON

Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that can occur when there is insufficient security validation / sanitization of user-supplied input file names, such that characters representing “traverse to parent directory” are passed through to the file APIs.

CNA Affected

[
  {
    "product": "Symantec Management Console",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to ITMS 8.1 RU4"
      }
    ]
  }
]