CVE-2017-15532 Path traversal in Messaging Gateway

What is CVE-2017-15532?

CVE-2017-15532 is a medium-severity path traversal vulnerability in Symantec Corporation Messaging Gateway, published on 20 Dec 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Prior to 10.6.4, Symantec Messaging Gateway may be susceptible to a path traversal attack (also known as directory traversal). These types of attacks aim to access files and directories that are stored outside the web root folder. By manipulating variables, it may be possible to access arbitrary files and directories stored on the file system including application source code or configuration and critical system files.

Weakness: CWE-22

Which versions are affected by CVE-2017-15532?

It affects 1 product.

Products include Symantec Messaging Gateway.

How do I fix CVE-2017-15532?

No fix has been published for CVE-2017-15532 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2017-15532 being exploited?

There is no known exploitation of CVE-2017-15532 in the wild and no public exploit code.

Other vulnerabilities in Symantec Corporation Messaging Gateway

• CVE-2017-6326 Code injection in Messaging Gateway Critical 10.0
• CVE-2018-12242 Auth bypass in Symantec Messaging Gateway Critical 9.8
• CVE-2018-12243 XML external entity in Symantec Messaging Gateway High 8.8
• CVE-2016-2204 Command injection in n/a High 8.2
• CVE-2012-3579 Hardcoded credentials in n/a High 7.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-r35f-v6j3-28f5.