| Package | Affected versions | Patched versions |
|---|---|---|
| security information manager | = 4.0.2= 4.0.2.1= 4.0.2.10= 4.0.2.11= 4.0.2.12= 4.0.2.13= 4.0.2.14= 4.0.2.15= 4.0.2.16= 4.0.2.17= 4.0.2.18= 4.0.2.19= 4.0.2.2= 4.0.2.20= 4.0.2.21= 4.0.2.22= 4.0.2.23= 4.0.2.24= 4.0.2.25= 4.0.2.26= 4.0.2.27= 4.0.2.28= 4.0.2.29= 4.0.2.3= 4.0.2.4= 4.0.2.5= 4.0.2.6= 4.0.2.7= 4.0.2.8= 4.0.2.9 |
M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free