Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xrrv-gjcc-h93v

Опубликовано: 01 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.

Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.

EPSS

Процентиль: 90%
0.06012
Низкий

7.5 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 7.5
nvd
около 3 лет назад

Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.

CVSS3: 8.4
fstec
около 4 лет назад

Уязвимость антивирусного программного средства Symantec Endpoint Protection, связанная с возможностью обхода элементов безопасности, позволяющая нарушителю обойти парольную защиту для импорта/экспорта политик безопасности

EPSS

Процентиль: 90%
0.06012
Низкий

7.5 High

CVSS3

Дефекты

CWE-863