4.6

CVE-2013-5010

EPSS 0.35%
Veröffentlicht 10.01.2014 16:47:05
Zuletzt bearbeitet 29.04.2026 01:13:23
Erkennungen
Login

The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 24 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Endpoint Protection Version <= 11.0.7.3

Symantec ≫ Endpoint Protection Version 11.0

Symantec ≫ Endpoint Protection Version 11.0 Update ru5

Symantec ≫ Endpoint Protection Version 11.0 Update ru6

Symantec ≫ Endpoint Protection Version 11.0 Update ru6a

Symantec ≫ Endpoint Protection Version 11.0 Update ru6mp1

Symantec ≫ Endpoint Protection Version 11.0 Update ru6mp2

Symantec ≫ Endpoint Protection Version 11.0.1

Symantec ≫ Endpoint Protection Version 11.0.1 Update mp1

Symantec ≫ Endpoint Protection Version 11.0.1 Update mp2

Symantec ≫ Endpoint Protection Version 11.0.2

Symantec ≫ Endpoint Protection Version 11.0.2 Update mp1

Symantec ≫ Endpoint Protection Version 11.0.2 Update mp2

Symantec ≫ Endpoint Protection Version 11.0.4

Symantec ≫ Endpoint Protection Version 11.0.4 Update mp1a

Symantec ≫ Endpoint Protection Version 11.0.4 Update mp2

Symantec ≫ Endpoint Protection Version 11.0.3001

Symantec ≫ Endpoint Protection Version 11.0.6000

Symantec ≫ Endpoint Protection Version 11.0.6100

Symantec ≫ Endpoint Protection Version 11.0.6200

Symantec ≫ Endpoint Protection Version 11.0.6200.754

Symantec ≫ Endpoint Protection Version 11.0.6300

Symantec ≫ Endpoint Protection Version 11.0.7000

Symantec ≫ Endpoint Protection Version 11.0.7100

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.35%	0.264

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00

Vendor Advisory

http://www.securityfocus.com/bid/64129

https://exchange.xforce.ibmcloud.com/vulnerabilities/90225

https://nvd.nist.gov/vuln/detail/CVE-2013-5010

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-5010

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-5010

EUVD