Lucene search

K
nvd[email protected]NVD:CVE-2015-8801
HistoryJun 30, 2016 - 11:59 p.m.

CVE-2015-8801

2016-06-3023:59:00
CWE-284
CWE-254
web.nvd.nist.gov
6

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

CVSS3

2.9

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

4.5

Confidence

High

EPSS

0

Percentile

9.5%

Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device.

Affected configurations

Nvd
Node
symantecendpoint_protection_managerRange12.1.6mp4
VendorProductVersionCPE
symantecendpoint_protection_manager*cpe:2.3:a:symantec:endpoint_protection_manager:*:mp4:*:*:*:*:*:*

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

CVSS3

2.9

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

AI Score

4.5

Confidence

High

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2015-8801