Privilege Escalation Vulnerability in Symantec Endpoint Protection Manager and Mail Security for MS Exchange
CVE-2019-12759

7.8HIGH

Key Information:

Vendor
Symantec
Status
Symantec Endpoint Protection Manager (sepm), Symantec Mail Security For Ms Exchange (smsmse)
Vendor
CVE Published:
15 November 2019

Summary

Symantec Endpoint Protection Manager and Symantec Mail Security for MS Exchange exhibit a vulnerability that allows attackers to exploit weaknesses in the software. If successful, an attacker could gain unauthorized elevated access to sensitive resources, potentially compromising critical data and operational integrity. Users of these products are advised to update to the latest versions to mitigate the risk.

Affected Version(s)

Symantec Endpoint Protection Manager (SEPM), Symantec Mail Security for MS Exchange (SMSMSE) prior to versions 14.2 RU2, prior to 7.5.x

References

https://support.symantec.com/us/en/article.SYMSA1488.html
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.