CVE-2020-5834 - Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory

Back Back to CVE browser

MEDIUM

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory

Published May 11, 2020

5.3

MEDIUM

CVSS 3.1

EPSS 1.69%

Description

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory.

Affected products

Vendor n/a Product Symantec Endpoint Protection Manager Default
n/a
- Version
  Prior to 14.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Symantec Endpoint Protection Manager

n/a

Version	Status	Constraints
Prior to 14.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26989
Advisory
https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26989		Advisory
https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762		x_refsource_MISCVendor Advisory