CVEvulnerability
CVE-2013-5010
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.
Affected configurations
• symantec endpoint protection (<= 11.0.7.3)
• symantec endpoint protection 11.0
• symantec endpoint protection 11.0.1
• symantec endpoint protection 11.0.2
• symantec endpoint protection 11.0.4
• symantec endpoint protection 11.0.3001
• symantec endpoint protection 11.0.6000
• symantec endpoint protection 11.0.6100
• symantec endpoint protection 11.0.6200
• symantec endpoint protection 11.0.6200.754
• symantec endpoint protection 11.0.6300
• symantec endpoint protection 11.0.7000
• symantec endpoint protection 11.0.7100
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/64129 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90225 exchange.xforce.ibmcloud.com
- http://www.securityfocus.com/bid/64129 www.securityfocus.com
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90225 exchange.xforce.ibmcloud.com