Lucene search
HistoryAug 05, 2013 - 1:22 p.m.
CVE-2013-4677
symantec
backup exec
weak permissions
security vulnerability
nvd
6 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.3%
Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files.
Related
cvelist
cvelist
CVE-2013-4677
2013-08-04 20:00:00
prion
prion
Design/Logic Flaw
2013-08-05 13:22:00
nessus
nessus
Symantec Backup Exec Server Multiple Vulnerabilities (SYM13-009)
2013-08-08 00:00:00
kaspersky
kaspersky
KLA10351 Multiple vulnerabilities in Symantec Backup Exec
2013-08-05 00:00:00
6 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.3%
Related for CVE-2013-4677