CVEvulnerability
CVE-2012-4350
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-12-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before 11.0 allow local users to gain privileges via unspecified vectors.
Affected configurations
• symantec enterprise security manager (<= 10.0)
• symantec enterprise security manager 6.0
• symantec enterprise security manager 6.5
• symantec enterprise security manager 6.5.0
• symantec enterprise security manager 6.5.1
• symantec enterprise security manager 6.5.2
• symantec enterprise security manager 6.5.3
• symantec enterprise security manager 9.0
• symantec enterprise security manager 9.0.1
References
- http://www.securityfocus.com/bid/56915 www.securityfocus.com
- http://www.securitytracker.com/id?1027874 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121213_00 www.symantec.com
- http://www.securityfocus.com/bid/56915 www.securityfocus.com
- http://www.securitytracker.com/id?1027874 www.securitytracker.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121213_00 www.symantec.com