Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-5009

The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.

Published

2014-01-10T16:47:05.097

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.4 (HIGH)

CVSSv2 Vector

AV:A/AC:M/Au:S/C:C/I:C/A:C

  • Access Vector: ADJACENT_NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

4.4

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec endpoint_protection ≤ 11.0.7.3 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.3001 Yes
Application symantec endpoint_protection 11.0.6000 Yes
Application symantec endpoint_protection 11.0.6100 Yes
Application symantec endpoint_protection 11.0.6200 Yes
Application symantec endpoint_protection 11.0.6200.754 Yes
Application symantec endpoint_protection 11.0.6300 Yes
Application symantec endpoint_protection 11.0.7000 Yes
Application symantec endpoint_protection 11.0.7100 Yes
References