Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-0114

fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request.

Published

2010-12-22T01:00:02.283

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.3001 Yes
References