Privilege Escalation Vulnerability in Symantec Endpoint Protection

CVE-2017-13681

What is CVE-2017-13681?

Certain versions of Symantec Endpoint Protection are exposed to a privilege escalation vulnerability that may allow an unauthorized user to gain elevated access to resources that should be protected at lower access levels. This vulnerability requires multiple file and directory writes to the local filesystem for exploitation, making it less likely to be exploited through standard attack vectors such as drive-by downloads. It is crucial for organizations using affected versions to apply the latest updates to mitigate potential risks.

References