CVE-2017-15532

Prior to 10.6.4, Symantec Messaging Gateway may be susceptible to a path traversal attack (also known as directory traversal). These types of attacks aim to access files and directories that are stored outside the web root folder. By manipulating variables, it may be possible to access arbitrary files and directories stored on the file system including application source code or configuration and critical system files.

• CWE-22

• http://www.securityfocus.com/bid/102096Third Party Advisory, VDB Entry
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171220_00Vendor Advisory
• http://www.securityfocus.com/bid/102096Third Party Advisory, VDB Entry
• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20171220_00Vendor Advisory

Published

Dec 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15527Prior to ITMS 8.1 RU4, the Symantec Management Console can b…
• CVE-2017-15528Prior to v 7.6, the Install Norton Security (INS) product ca…3.7
• CVE-2017-15529Prior to 4.4.1.10, the Norton Family Android App can be susc…
• CVE-2017-1553IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to …
• CVE-2017-15530Prior to 4.4.1.10, the Norton Family Android App can be susc…
• CVE-2017-15531Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.…
• CVE-2017-15533Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4…
• CVE-2017-15534The Norton App Lock prior to version 1.3.0.13 can be suscept…
• CVE-2017-15535MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a di…
• CVE-2017-15536An issue was discovered in Cloudera Data Science Workbench (…
• CVE-2017-15537The x86/fpu (Floating Point Unit) subsystem in the Linux ker…
• CVE-2017-15538Stored XSS vulnerability in the Media Objects component of I…