CVE-2017-15532

CVE-2017-15532 affects Symantec Messaging Gateway prior to version 10.6.4, exposing a directory traversal flaw in the product’s handling of input that allows access to files outside the web root. The root cause is an improper validation/manipulation of variables used in file operations within the...

Symantec Messaging Gateway Directory Traversal

SUMMARY Symantec has released an update to address one issue in the Symantec Messaging Gateway product. AFFECTED PRODUCTS Symantec Messaging Gateway SMG --- CVE | Affected Versions | Remediation CVE-2017-15532 | Prior to 10.6.4 | Upgrade to 10.6.4 ISSUES CVE-2017-15532 --- Severity/CVSSv3: | Medi...