CVE-2016-5312

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:*

Information

Published : 2017-04-14 11:59

Updated : 2017-04-22 07:16


NVD link : CVE-2016-5312

Mitre link : CVE-2016-5312


JSON object : View

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

dedicated server usa

Products Affected

symantec

  • messaging_gateway