← Vulnerability feed

Vulnerability record · CVE-2015-1484 · published 22 April 2015

CVE-2015-1484: Symantec workspace streaming vulnerability

Symantec · Workspace Streaming

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

6.9 CVSS 2.0 Medium EPSS 0.45% · top 63.7%
6.9CVSS 2.0 base score
0.45%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/73925
http://www.securitytracker.com/id/1032133
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=& Vendor Advisory
http://www.securityfocus.com/bid/73925
http://www.securitytracker.com/id/1032133
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=& Vendor Advisory

Track CVE-2015-1484 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2008-4389Symantec workspace streaming improper authentication vulnerabilitySymantec AppStream 5.2.x and Symantec Workspace Streaming (SWS) 6.1.x before 6.1 SP4 do not properly perform authentication, which allows remote Work…EPSS 2.5%7.9CVE-2014-1649Symantec workspace streaming permissions and access controls vulnerabilityThe server in Symantec Workspace Streaming (SWS) before 7.5.0.749 allows remote attackers to access files and functionality by sending a crafted XMLR…EPSS 42%5.7CVE-2016-2206Symantec workspace streaming permissions and access controls vulnerabilityThe management console in Symantec Workspace Streaming (SWS) 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization …EPSS 1.0%5.7CVE-2016-2205Symantec workspace streaming path traversal vulnerabilityDirectory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming (SWS) 7.5.x befor…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2015-1484), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.