Lucene search

K
cveSymantecCVE-2020-5832
HistoryApr 06, 2020 - 8:15 p.m.

CVE-2020-5832

2020-04-0620:15:12
symantec
web.nvd.nist.gov
39
symantec
data center security
manager
cve-2020-5832
vulnerability
privilege escalation
nvd
6.8.2

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0

Percentile

14.1%

Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

Affected configurations

Nvd
Node
symantecdata_center_securityRange<6.8.2
VendorProductVersionCPE
symantecdata_center_security*cpe:2.3:a:symantec:data_center_security:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "Data Center Security Manager Component",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.8.2 (aka 6.8 MP2)"
      }
    ]
  }
]

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0

Percentile

14.1%

Related for CVE-2020-5832