CVE-2013-5009 | BDVDB-2026-59235 Detail

Description#

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/64128
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00
https://exchange.xforce.ibmcloud.com/vulnerabilities/90224

Exploit#

No public exploit known

History#

Version 12014-01-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.