CVE-2018-18368

Symantec Endpoint Protection Manager (SEPM) is affected by a local privilege escalation vulnerability (CVE-2018-18368) that exists in SEPM prior to 14.2 RU1. An attacker with local access could gain elevated privileges. Remediation is to upgrade to SEPM/SEP 14.2 RU1 (or RU2 where applicable) and ...

CVE-2019-12758: Uncontrolled Search Path Element

Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution vulnerability, which may allow an individual to execute code without a resident proper digital signature...

PT-2019-12924

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.2 RU2 Description The issue allows for a password protection bypass, where individuals with local administrator rights can bypass the secondary layer of password protection. Recommendations For...

CVE-2019-12757: Undefined Security Weakness

Symantec Endpoint Protection SEP, prior to 14.2 RU2 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition SEP SBE prior to 12.1 RU6 MP10d 12.1.7510.7002, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to...

CVE-2018-18368: Improper Privilege Management

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an...

PT-2019-12925

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.2 RU2 Symantec Endpoint Protection Small Business Edition versions prior to 12.1 RU6 MP10d 12.1.7510.7002 Symantec Endpoint Protection versions 12.1 RU6 MP10 and earlier Description The issue i...

CVE-2019-12759: Undefined Security Weakness

Symantec Endpoint Protection Manager SEPM and Symantec Mail Security for MS Exchange SMSMSE, prior to versions 14.2 RU2 and 7.5.x respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software applicati...

CVE-2019-18372: Undefined Security Weakness

Symantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

PT-2019-9584

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions prior to 14.2 RU1 Description The issue is related to a privilege escalation problem, where an attacker may try to compromise the software to gain elevated access to protected resources...

CVE-2019-12756: Undefined Security Weakness

Symantec Endpoint Protection SEP, prior to 14.2 RU2 may be susceptible to a password protection bypass vulnerability whereby the secondary layer of password protection could by bypassed for individuals with local administrator rights...

Symantec Endpoint Protection Multiple Issues

SUMMARY Symantec has released updates to address issues that were discovered in the Symantec Endpoint Protection SEP, Symantec Endpoint Protection Manager SEPM, Symantec Endpoint Protection Small Business Edition SEP SBE and Symantec Mail Security for MS Exchange SMSMSE products. AFFECTED PRODUCT...

PT-2019-12927

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.2 RU2 Symantec Mail Security for MS Exchange versions prior to 7.5.x Description The issue is related to a privilege escalation problem, where an attacker may try to compromise the...

Symantec Endpoint Protection CVE-2019-12756 Local Security Bypass Vulnerability

Description Symantec Endpoint Protection is prone to a local security-bypass vulnerability. Local attackers can exploit this vulnerability to bypass certain security restrictions and gain access to possibly sensitive information. Versions prior to Symantec Endpoint Protection 14 RU2 are vulnerabl...

PT-2019-12926

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.2 RU2 Description The issue allows an individual to execute unsigned code, potentially bypassing self-defense mechanisms. This could enable an attacker to execute code without a proper digital...

PT-2019-15381

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.2 RU2 Description The issue is related to a privilege escalation problem, where an attacker may try to compromise the software to gain elevated access to protected resources. Recommendations Fo...

Symantec Endpoint Protection CVE-2019-18372 Local Privilege Escalation Vulnerability

Description Symantec Endpoint Protection is prone to a local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Symantec Endpoint Protection SEP versions prior to 14.2 RU2 are vulnerable. Technologies Affected Symantec Endpoint Protection 11...

Multiple Symantec Products CVE-2019-12759 Local Privilege Escalation Vulnerability

Description Multiple Symantec Products are prone to an local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. The following products and versions are affected: Symantec Endpoint Protection Manager SEPM prior to versions 14.2 RU2 Symantec Ma...

Symantec Endpoint Protection CVE-2019-12758 Local Code Execution Vulnerability

Description Symantec Endpoint Protection is prone to a local code-execution vulnerability. A local attacker can leverage this issue to execute arbitrary code in the context of affected application. Failed attempts may lead to denial-of-service conditions. Symantec Endpoint Protection versions pri...

Symantec Endpoint Protection Manager LuComServer stDisScriptEngine Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Symantec Endpoint Protection Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Symantec Endpoint Protection Manager OpenSSL Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Symantec Endpoint Protection Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...