CVE-2018-18368 - Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user

Back Back to CVE browser

HIGH

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user

Published Nov 15, 2019

7.8

HIGH

CVSS 3.1

EPSS 0.58%

Description

Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected products

Vendor n/a Product Symantec Endpoint Protection Manager (SEPM) Default
n/a
- Version
  prior to 14.2 RU1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Symantec Endpoint Protection Manager (SEPM)

n/a

Version	Status	Constraints
prior to 14.2 RU1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10099
Advisory
https://support.symantec.com/us/en/article.SYMSA1488.html
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10099		Advisory
https://support.symantec.com/us/en/article.SYMSA1488.html		x_refsource_MISCPatchVendor Advisory