CVE-2016-5312

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream.

Affected products

Symantec Messaging Gateway

Symantec Messaging Gateway

≤ 10.6.1

Fix

Available

CVSS 3.0

6.5 MEDIUM

EPSS

53.7% (99th percentile)

Weakness

CWE-22

NVD status

Modified

Published

2017-04-14