CVE-2012-4350

2012-12-1820:55:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2012-4350

symantec

esm

windows search path vulnerabilities

privilege escalation

6.8 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON

Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before 11.0 allow local users to gain privileges via unspecified vectors.

CPENameOperatorVersion
symantec:enterprise_security_managersymantec enterprise security managereq6.5.2
symantec:enterprise_security_managersymantec enterprise security managereq6.5.3
symantec:enterprise_security_managersymantec enterprise security managereq9.0.1
symantec:enterprise_security_managersymantec enterprise security managereq9.0
symantec:enterprise_security_managersymantec enterprise security managerle10.0
symantec:enterprise_security_managersymantec enterprise security managereq6.0
symantec:enterprise_security_managersymantec enterprise security managereq6.5.1
symantec:enterprise_security_managersymantec enterprise security managereq6.5.0
symantec:enterprise_security_managersymantec enterprise security managereq6.5

CPE	Name	Operator	Version
symantec:enterprise_security_manager	symantec enterprise security manager	eq	6.5.2
symantec:enterprise_security_manager	symantec enterprise security manager	eq	6.5.3
symantec:enterprise_security_manager	symantec enterprise security manager	eq	9.0.1
symantec:enterprise_security_manager	symantec enterprise security manager	eq	9.0
symantec:enterprise_security_manager	symantec enterprise security manager	le	10.0
symantec:enterprise_security_manager	symantec enterprise security manager	eq	6.0
symantec:enterprise_security_manager	symantec enterprise security manager	eq	6.5.1
symantec:enterprise_security_manager	symantec enterprise security manager	eq	6.5.0
symantec:enterprise_security_manager	symantec enterprise security manager	eq	6.5