Security Advisory

CVE-2012-4347

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-12-05 11:00:00

Last updated 2024-08-06 20:35:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated users to read arbitrary files via a .. (dot dot) in the (1) logFile parameter in a logs action to brightmail/export or (2) localBackupFileSelection parameter in an APPLIANCE restoreSource action to brightmail/admin/restore/download.do.

← Browse all CVEs View on cve.org ↗