CVE-2012-4348 | BDVDB-2026-53824 Detail

Description#

The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121210_00
http://www.securityfocus.com/bid/56846
http://www.securitytracker.com/id?1027863

Exploit#

No public exploit known

History#

Version 12012-12-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.