CVE-2016-5312

Published: 2017-04-14T18:59Z

Last Modified: 2024-11-21T02:54Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt