CVEvulnerability

CVE-2015-1484

6.9 MEDIUM Published 2015-04-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-04-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C

Description

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Affected configurations

• symantec workspace streaming 6.1 • symantec workspace streaming 7.5

References