CVE-2014-9226

2015-01-2115:17:00

CWE-264

[email protected]

web.nvd.nist.gov

symantec

critical system protection

scsp

sdcs:sa

cve-2014-9226

security

server

bypass

vulnerability

6.1 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

9.2%

JSON

The management server in Symantec Critical System Protection (SCSP) 5.2.9 through MP6 and Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x through 6.0 MP1 allows local users to bypass intended Protection Policies via unspecified vectors.

CPENameOperatorVersion
broadcom:symantec_critical_system_protectionbroadcom symantec critical system protectioneq5.2.9
symantec:data_center_securitysymantec data center securityeq6.0.0

CPE	Name	Operator	Version
broadcom:symantec_critical_system_protection	broadcom symantec critical system protection	eq	5.2.9
symantec:data_center_security	symantec data center security	eq	6.0.0