Symantec Workspace Streaming XMLRPC Unauthorized Access Vulnerability

Release date:
Updated on:

Affected Systems:
Symantec Workspace Streaming
Description:
--------------------------------------------------------------------------------
Bugtraq id: 67189
CVE (CAN) ID: CVE-2014-1649
 
Symantec Workspace Streaming enables on-demand application setup, real-time software license management, and real-time application upgrade.

Symantec Workspace Streaming 7.5.x and earlier versions have an unauthorized access vulnerability. After successful exploitation, attackers can create backdoors on the target server, resulting in unauthorized access.
 
<* Source: Andrea Micalizzi (rgod)
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Symantec
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://www.symantec.com/business/security_response/

This article permanently updates the link address: