PT-2020-8045 · Symantec · Symantec It Management Suite

Published 2020-01-08 · Updated 2020-01-10 · CVE-2016-6588

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Symantec IT Management Suite version 8.0

Description: A Cross-Site Scripting (XSS) issue exists in the ITMS workflow process manager console.

Recommendations: For Symantec IT Management Suite version 8.0, consider disabling access to the ITMS workflow process manager console until a fix is available.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-6588

Affected Products

Symantec It Management Suite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6588 · Security Note
• https://support.symantec.com/us/en/article.symsa1383.html · Vendor Advisory
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161031_00 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6588 · Vendor Advisory
• http://securityfocus.com/bid/93952 · Note