7.4

CVE-2013-5009

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Endpoint Protection Version <= 11.0.7.3
Symantec ≫ Endpoint Protection Version 11.0
Symantec ≫ Endpoint Protection Version 11.0 Update ru5
Symantec ≫ Endpoint Protection Version 11.0 Update ru6
Symantec ≫ Endpoint Protection Version 11.0 Update ru6a
Symantec ≫ Endpoint Protection Version 11.0 Update ru6mp1
Symantec ≫ Endpoint Protection Version 11.0 Update ru6mp2
Symantec ≫ Endpoint Protection Version 11.0.1
Symantec ≫ Endpoint Protection Version 11.0.1 Update mp1
Symantec ≫ Endpoint Protection Version 11.0.1 Update mp2
Symantec ≫ Endpoint Protection Version 11.0.2
Symantec ≫ Endpoint Protection Version 11.0.2 Update mp1
Symantec ≫ Endpoint Protection Version 11.0.2 Update mp2
Symantec ≫ Endpoint Protection Version 11.0.4
Symantec ≫ Endpoint Protection Version 11.0.4 Update mp1a
Symantec ≫ Endpoint Protection Version 11.0.4 Update mp2
Symantec ≫ Endpoint Protection Version 11.0.3001
Symantec ≫ Endpoint Protection Version 11.0.6000
Symantec ≫ Endpoint Protection Version 11.0.6100
Symantec ≫ Endpoint Protection Version 11.0.6200
Symantec ≫ Endpoint Protection Version 11.0.6200.754
Symantec ≫ Endpoint Protection Version 11.0.6300
Symantec ≫ Endpoint Protection Version 11.0.7000
Symantec ≫ Endpoint Protection Version 11.0.7100
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.512
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.4 4.4 10
AV:A/AC:M/Au:S/C:C/I:C/A:C
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/64128
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/90224