Lucene search

[email protected]CVE-2015-8799

HistoryJun 08, 2016 - 2:59 p.m.

CVE-2015-8799

2016-06-0814:59:09

CWE-22

[email protected]

web.nvd.nist.gov

cve-2015-8799

directory traversal

symantec

critical system protection

data center security

server

vulnerability

7.6 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

41.6%

JSON

Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical System Protection (SCSP) before 5.2.9 MP6, Data Center Security: Server Advanced Server (DCS:SA) 6.x before 6.5 MP1 and 6.6 before MP1, and Data Center Security: Server Advanced Server and Agents (DCS:SA) through 6.6 MP1 allows remote authenticated users to write update-package data to arbitrary agent locations via unspecified vectors.

Affected configurations

NVD

Node

broadcomsymantec_critical_system_protectionRange≤5.2.9

broadcomsymantec_data_center_security_serverRange6.0.0–6.5.0advanced

broadcomsymantec_data_center_security_serverMatch6.5.0-advanced

broadcomsymantec_data_center_security_serverMatch6.6.0advanced

broadcomsymantec_data_center_security_server_and_agentsMatch6.6.0advanced

broadcomsymantec_embedded_security_critical_system_protectionRange≤1.0

broadcomsymantec_embedded_security_critical_system_protection_for_controllers_and_devicesMatch6.5.0

CPENameOperatorVersion
broadcom:symantec_critical_system_protectionbroadcom symantec critical system protectionle5.2.9
broadcom:symantec_data_center_security_serverbroadcom symantec data center security serverlt6.5.0
broadcom:symantec_data_center_security_serverbroadcom symantec data center security servereq6.6.0
broadcom:symantec_data_center_security_server_and_agentsbroadcom symantec data center security server and agentseq6.6.0
broadcom:symantec_embedded_security_critical_system_protectionbroadcom symantec embedded security critical system protectionle1.0
broadcom:symantec_embedded_security_critical_system_protection_for_controllers_and_devicesbroadcom symantec embedded security critical system protection for controllers and deviceseq6.5.0

CPE	Name	Operator	Version
broadcom:symantec_critical_system_protection	broadcom symantec critical system protection	le	5.2.9
broadcom:symantec_data_center_security_server	broadcom symantec data center security server	lt	6.5.0
broadcom:symantec_data_center_security_server	broadcom symantec data center security server	eq	6.6.0
broadcom:symantec_data_center_security_server_and_agents	broadcom symantec data center security server and agents	eq	6.6.0
broadcom:symantec_embedded_security_critical_system_protection	broadcom symantec embedded security critical system protection	le	1.0
broadcom:symantec_embedded_security_critical_system_protection_for_controllers_and_devices	broadcom symantec embedded security critical system protection for controllers and devices	eq	6.5.0

References

www.securityfocus.com/bid/90885

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160607_00

7.6 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

41.6%

JSON

Related for CVE-2015-8799

prion1 nvd1 cvelist1 symantec1 nessus1