description: An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges.
problem types: OS command injection
affected:
{
product: Symantec Security Analytics
vendor: n/a
versions:
status: affected, version: Security Analytics 7.2 prior 7.2.7, 8.1 prior to 8.1.3-NSR3, 8.2 prior to 8.2.1-NSR2 or 8.2.2
}