Unquoted Windows Search Path Vulnerability in Symantec Workspace Streaming Agent

CVE-2015-1484 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Learn more about our Cis Benchmark Audit For Google Workspace.