Privilege Escalation in Symantec Endpoint Encryption Affects Security Management

CVE-2017-15526

What is CVE-2017-15526?

The Symantec Endpoint Encryption product versions before 11.1.3MP1 are affected by a null pointer de-reference issue, which may lead to a NullPointerException. This error can be exploited, resulting in a privilege escalation scenario, potentially allowing unauthorized access or control over the system. It is essential for users to upgrade to the latest version to mitigate this risk.

References