CVE-2016-2206

Severity: medium (CVSS 5.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-12 · updated 2026-06-17
Weakness: CWE-264

Description

The management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download configuration file.

Affected products

Symantec Workspace Streaming: 7.5.0, 7.5.0-sp1, 7.6.0
Symantec Workspace Virtualization: 7.5.0, 7.5.0-sp1, 7.6.0

References

http://www.securityfocus.com/bid/89394
http://www.securitytracker.com/id/1036262
http://www.securitytracker.com/id/1036263
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00
http://www.securityfocus.com/bid/89394
http://www.securitytracker.com/id/1036262
http://www.securitytracker.com/id/1036263
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160707_00

Get alerted when CVE-2016-2206 or the next vulnerability affects your stack