7.8

CVE-2016-6590

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Symantec ≫ Encryption Desktop Version >= 10.0.0 < 10.4.1
Symantec ≫ Endpoint Encryption Version >= 7.0 < 7.6
Symantec ≫ Endpoint Encryption Version 7.6
Symantec ≫ Ghost Solution Suite Version 3.1 Update -
Symantec ≫ Ghost Solution Suite Version 3.1 Update maintenance_pack1
Symantec ≫ Ghost Solution Suite Version 3.1 Update maintenance_pack2
Symantec ≫ Ghost Solution Suite Version 3.1 Update maintenance_pack3
Symantec ≫ It Management Suite Version 7.6
Symantec ≫ It Management Suite Version 8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.232
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://www.securityfocus.com/bid/94279
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037302
Third Party Advisory
VDB Entry
https://support.symantec.com/us/en/article.symsa1385.html
Vendor Advisory