CVE-2012-4349

2012-12-1112:18:36

[email protected]

web.nvd.nist.gov

symantec

snac

windows

vulnerability

unquoted path

privilege escalation

cve-2012-4349

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.7%

JSON

Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges via unspecified vectors.

Affected configurations

NVD

Node

symantecnetwork_access_controlMatch12.1

symantecnetwork_access_controlMatch12.1.1

symantecnetwork_access_controlMatch12.1.1.1

CPENameOperatorVersion
symantec:network_access_controlsymantec network access controleq12.1
symantec:network_access_controlsymantec network access controleq12.1.1
symantec:network_access_controlsymantec network access controleq12.1.1.1

CPE	Name	Operator	Version
symantec:network_access_control	symantec network access control	eq	12.1
symantec:network_access_control	symantec network access control	eq	12.1.1
symantec:network_access_control	symantec network access control	eq	12.1.1.1