CVE-2017-15527

Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that can occur when there is insufficient security validation / sanitization of user-supplied input file names, such that characters representing "traverse to parent directory" are passed through to the file APIs.

• CWE-22

• http://www.securityfocus.com/bid/101743Third Party Advisory, VDB Entry
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171120_00Issue Tracking, Mitigation, Vendor Advisory
• http://www.securityfocus.com/bid/101743Third Party Advisory, VDB Entry
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171120_00Issue Tracking, Mitigation, Vendor Advisory

Published

Nov 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15521Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-15522Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-15523Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-15524The Application Firewall Pack (AFP, aka Web Application Fire…
• CVE-2017-15525Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be…
• CVE-2017-15526Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be…
• CVE-2017-15528Prior to v 7.6, the Install Norton Security (INS) product ca…3.7
• CVE-2017-15529Prior to 4.4.1.10, the Norton Family Android App can be susc…
• CVE-2017-1553IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to …
• CVE-2017-15530Prior to 4.4.1.10, the Norton Family Android App can be susc…
• CVE-2017-15531Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.…
• CVE-2017-15532Prior to 10.6.4, Symantec Messaging Gateway may be susceptib…