CVE-2018-5237

CVE-2018-5237 corresponds to a privilege-escalation vulnerability in Symantec Endpoint Protection (SEP) Windows endpoints. Affected versions are SEP before 14 RU1 MP1 or 12.1 RU6 MP10; the issue is addressed by upgrading to SEP 14 RU1 MP1 or 12.1 RU6 MP10 and later. The connected advisory confirm...

CVE-2018-5236

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition or race hazard. This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events...

Symantec Norton App Lock Access Gain Vulnerability

Symantec Norton App Lock is a suite of applications from Symantec USA that provide security features for mobile devices. A security vulnerability exists in Symantec Norton App Lock. An attacker could exploit the vulnerability to gain access to a device by bypassing the application and preventing...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to a privilege escalation

Summary IBM InfoSphere Information Server could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. Vulnerability Details CVEID: CVE-2017-1468 DESCRIPTION: IBM InfoSphere Information Server could allow a local user to gain elevated privileges by...

Symantec Endpoint Protection Multiple Issues

SUMMARY Symantec has released a set of updates to address issues that were discovered in the Symantec Endpoint Protection product. AFFECTED PRODUCTS Symantec Endpoint Protection --- CVE | Affected Versions | Remediation CVE-2018-5236 CVE-2018-5237 | Prior to 14 RU1 MP1 or 12.1 RU6 MP10 | Upgrade ...

Router Vulnerability and the VPNFilter Botnet

On May 25, the FBI asked us all to reboot our routers. The story behind this request is one of sophisticated malware and unsophisticated home-network security, and it's a harbinger of the sorts of pervasive threats ­ from nation-states, criminals and hackers ­ that we should expect in coming year...

Symantec Content Analysis and Mail Transfer Defense Cross-Site Request Forgery Vulnerability

Symantec Content Analysis and Mail Transfer Defense are both products of Symantec, Inc. Symantec Content Analysis is a content analysis system. Mail Transfer Defense is an email threat protection system. A cross-site request forgery vulnerability exists in Symantec Content Analysis and Mail...

Authentication flaw

Symantec Advanced Secure Gateway ASG 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The products can be configured with a SAML authentication realm to authenticate network users in intercepted proxy traffic. When parsing SAML responses, A...

CVE-2018-5241

Symantec Advanced Secure Gateway ASG 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The products can be configured with a SAML authentication realm to authenticate network users in intercepted proxy traffic. When parsing SAML responses, A...

CVE-2018-5241

Symantec Advanced Secure Gateway ASG 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The products can be configured with a SAML authentication realm to authenticate network users in intercepted proxy traffic. When parsing SAML responses, A...

CVE-2018-5241

Symantec Advanced Secure Gateway ASG 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The products can be configured with a SAML authentication realm to authenticate network users in intercepted proxy traffic. When parsing SAML responses, A...

CVE-2018-5241

CVE-2018-5241 affects Symantec Advanced Secure Gateway (ASG) and ProxySG. The vulnerability arises when parsing SAML responses: XML nodes with comments are mishandled, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature and bypass authentica...

login.symantec.com XSS vulnerability

Open Bug Bounty ID: OBB-622837 Description| Value ---|--- Affected Website:| login.symantec.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SA167: SAML Authentication Bypass

SUMMARY When configured to authenticate network users with a SAML authentication realm, Symantec ASG and ProxySG incorrectly handle SAML responses that have XML nodes with comments. A remote attacker can modify a valid SAML response without invalidating its cryptographic signature to bypass SAML...

SA166: OpenSSL Vulnerabilities 27-Mar-2018

SUMMARY Symantec Network Protection products using affected versions of OpenSSL are susceptible to several vulnerabilities. A remote attacker can forge cryptographic messages and cause denial of service through application crashes. AFFECTED PRODUCTS The following products are vulnerable: Advanced...

Session fixation

Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat ROBOT attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish large numbers of crafted SSL connections to the target and obtain the session keys required...

CVE-2017-15533

Symantec SSL Visibility SSLV 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher Oracle Threat ROBOT attack. All affected SSLV versions act as weak oracles according the oracle classification used in the ROBOT research paper. A remo...

CVE-2017-18268

Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat ROBOT attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish large numbers of crafted SSL connections to the target and obtain the session keys required...

CVE-2017-15533

Symantec SSL Visibility SSLV 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the Return of the Bleichenbacher Oracle Threat ROBOT attack. All affected SSLV versions act as weak oracles according the oracle classification used in the ROBOT research paper. A remo...

CVE-2017-18268

Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat ROBOT attack. A remote attacker, who has captured a pre-recorded SSL session inspected by SSLV, can establish large numbers of crafted SSL connections to the target and obtain the session keys required...