CVEvulnerability

CVE-2015-8801

2.9 LOW Published 2016-06-30 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2016-06-30
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 2.9 LOW — CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected]): 3.3 LOW — AV:L/AC:M/Au:N/C:P/I:P/A:N
Weaknesses: CWE-254, CWE-284

Description

Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device.

Affected configurations

• symantec endpoint protection manager (<= 12.1.6)

Weakness · not in database (1)

CWE-254

Weakness · CWE (1)

CWE-284 Improper Access Control weakness

References