NVD

Id
85332  
Name
CVE-2016-5312  
Description
Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-04-27  
Published
2017-04-14  
Modified Date
2017-04-22  
Seq
2016-5312  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
416314 85332 CVE-2016-9468 https://github.com/nextcloud/server/commit/7350e13113c8ed484727a5c25331ec11d4d59f5f  View
416315 85332 CVE-2016-9468 https://github.com/nextcloud/server/commit/a4cfb3ddc1f4cdb585e05c0e9b2f8e52a0e2ee3e  View
416316 85332 CVE-2016-9468 https://github.com/owncloud/core/commit/96b8afe48570bc70088ccd8f897e9d71997d336e  View
416317 85332 CVE-2016-9468 https://github.com/owncloud/core/commit/bcc6c39ad8c22a00323a114e9c1a0a834983fb35  View
416318 85332 CVE-2016-9468 https://hackerone.com/reports/149798  View
416319 85332 CVE-2016-9468 https://nextcloud.com/security/advisory/?id=nc-sa-2016-011  View
416320 85332 CVE-2016-9468 https://owncloud.org/security/advisory/?id=oc-sa-2016-021  View
416321 85332 CVE-2016-9468 https://github.com/nextcloud/server/commit/7350e13113c8ed484727a5c25331ec11d4d59f5f  View
416322 85332 CVE-2016-9468 https://github.com/nextcloud/server/commit/a4cfb3ddc1f4cdb585e05c0e9b2f8e52a0e2ee3e  View
416323 85332 CVE-2016-9468 https://github.com/owncloud/core/commit/96b8afe48570bc70088ccd8f897e9d71997d336e  View
416324 85332 CVE-2016-9468 https://github.com/owncloud/core/commit/bcc6c39ad8c22a00323a114e9c1a0a834983fb35  View
416325 85332 CVE-2016-9468 https://hackerone.com/reports/149798  View
416326 85332 CVE-2016-9468 https://nextcloud.com/security/advisory/?id=nc-sa-2016-011  View
416327 85332 CVE-2016-9468 https://owncloud.org/security/advisory/?id=oc-sa-2016-021  View

Related JVN