Local Privilege Escalation in Symantec Enterprise Security Manager

CVE-2012-4350

Summary

Multiple unquoted Windows search path vulnerabilities exist in the Manager and Agent components of Symantec Enterprise Security Manager prior to version 11.0. These vulnerabilities enable local users to potentially exploit unspecified vectors to gain elevated privileges on the affected system, posing a significant security risk to users and organizations relying on Symantec ESM for endpoint protection.

References