CVEvulnerability
CVE-2016-2206
5.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-07-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.7 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download configuration file.
Affected configurations
• symantec workspace streaming 7.5.0
• symantec workspace streaming 7.6.0
• symantec workspace virtualization 7.5.0
• symantec workspace virtualization 7.6.0
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/89394 www.securityfocus.com
- http://www.securitytracker.com/id/1036262 www.securitytracker.com
- http://www.securitytracker.com/id/1036263 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00 Vendor Advisory
- http://www.securityfocus.com/bid/89394 www.securityfocus.com
- http://www.securitytracker.com/id/1036262 www.securitytracker.com
- http://www.securitytracker.com/id/1036263 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00 Vendor Advisory