7.4

CVE-2013-5009

EPSS 0.3%
Veröffentlicht 10.01.2014 16:47:05
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@symantec.com
Teams Watchlist Login
Unerledigt Login

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Endpoint Protection Version <= 11.0.7.3

Symantec ≫ Endpoint Protection Version11.0

Symantec ≫ Endpoint Protection Version11.0 Updateru5

Symantec ≫ Endpoint Protection Version11.0 Updateru6

Symantec ≫ Endpoint Protection Version11.0 Updateru6a

Symantec ≫ Endpoint Protection Version11.0 Updateru6mp1

Symantec ≫ Endpoint Protection Version11.0 Updateru6mp2

Symantec ≫ Endpoint Protection Version11.0.1

Symantec ≫ Endpoint Protection Version11.0.1 Updatemp1

Symantec ≫ Endpoint Protection Version11.0.1 Updatemp2

Symantec ≫ Endpoint Protection Version11.0.2

Symantec ≫ Endpoint Protection Version11.0.2 Updatemp1

Symantec ≫ Endpoint Protection Version11.0.2 Updatemp2

Symantec ≫ Endpoint Protection Version11.0.4

Symantec ≫ Endpoint Protection Version11.0.4 Updatemp1a

Symantec ≫ Endpoint Protection Version11.0.4 Updatemp2

Symantec ≫ Endpoint Protection Version11.0.3001

Symantec ≫ Endpoint Protection Version11.0.6000

Symantec ≫ Endpoint Protection Version11.0.6100

Symantec ≫ Endpoint Protection Version11.0.6200

Symantec ≫ Endpoint Protection Version11.0.6200.754

Symantec ≫ Endpoint Protection Version11.0.6300

Symantec ≫ Endpoint Protection Version11.0.7000

Symantec ≫ Endpoint Protection Version11.0.7100

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.505

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.4	4.4	10	AV:A/AC:M/Au:S/C:C/I:C/A:C

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/64128

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/90224

https://nvd.nist.gov/vuln/detail/CVE-2013-5009

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5009

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5009

EUVD