CVE-2020-5835

Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...

CVE-2020-5834

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

CVE-2020-5834

Summary: CVE-2020-5834 affects Symantec Endpoint Protection Manager (SEPM) prior to v14.3. A directory traversal vulnerability could allow a remote attacker to determine the size of files in a directory. Root cause / affected components: Directory traversal flaw in SEPM before 14.3 (as per multip...

CVE-2020-5833

CVE-2020-5833 affects Symantec Endpoint Protection Manager (SEPM) prior to version 14.3. The issue is described as an out-of-bounds read vulnerability in SEPM that could disclose memory contents. The connected sources (NVD entry, Red Hat advisory, Nessus plugin SYMSA1762 summary) consistently ref...

CVE-2020-5833

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

Symantec Endpoint Protection Security Update

Summary Symantec, A Division of Broadcom has released updates to address issues that were discovered in the Symantec Endpoint Protection SEP and Symantec Endpoint Protection Manager SEPM products. Affected Products Symantec Endpoint Protection Manager SEPM --- CVE | Affected Versions | Remediatio...

PT-2020-18743

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.3 Description The issue allows a remote actor to determine the size of files in the directory through a directory traversal attack. Recommendations For versions prior to 14.3, update to...

CVE-2020-5833: Out-of-bounds Read

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5837: Improper Link Resolution Before File Access

Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege...

PT-2020-18744

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.3 Description The issue is related to a race condition in the client remote deployment feature, which could potentially lead to an elevation of privilege on the remote machine...

PT-2020-18746

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.3 Description The issue may allow for a potential elevation of privilege due to the software not respecting file permissions when writing to log files that are replaced by symbolic links...

PT-2020-18745

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.3 Description The issue potentially allows a limited user to reset the ACLs on a file when Symantec Endpoint Protection's Tamper Protection feature is disabled. Recommendations For versions pri...

CVE-2020-5836: Undefined Security Weakness

Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while Symantec Endpoint Protection's Tamper Protection feature is disabled...

CVE-2020-5834: Improper Limitation of a Pathname to a Restricted Directory

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

CVE-2020-5835: Concurrent Execution using Shared Resource with Improper Synchronization

Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...

PT-2020-18742

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.3 Description The issue is related to an out of bounds vulnerability, which occurs when an application reads memory outside of the allocated bounds, potentially leading to unintended...

Qualys Response to Rapid7’s False Claims on VMDR

As remote working is becoming the need of the hour, IT and Security teams are working tirelessly to ensure continuity of services and deliver on all aspects of the business. To help our customers in these challenging times, we launched a 60-day no-cost ‘Remote Endpoint Protection’ service for...

KLA11747 Multiple vulnerabilities in Mycrosoft System Center

Multiple vulnerabilities were found in Mycrosoft System Center. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Defender can be exploited remotely via specially crafted comma...

November 2014 MDM client update in Windows 8.1 and Windows RT 8.1

November 2014 MDM client update in Windows 8.1 and Windows RT 8.1 About this update This update adds the ability for System Center Mobile Device Manager MDM to push a new System Center Endpoint Protection certificate before the old one has expired. This update applies to Windows 8.1 or Windows RT...

Mobile security—the 60 percent problem

This blog post is part of the Microsoft Intelligence Security Association MISA guest blog series. To learn more about MISA, visit the MISA webpage. Off the top of your head, what percentage of endpoints in your organization are currently protected? Something in the 98 percent+ range? Most...